An XCCDF Group - A logical subset of the XCCDF Benchmark
iptables
rsync-daemon
$ sudo dnf erase rsync-daemon
rsyncd
$ sudo systemctl mask --now rsyncd.service
xinetd
$ sudo dnf erase xinetd
$ sudo systemctl mask --now xinetd.service
ypbind
ypserv
$ sudo dnf erase ypserv
$ sudo systemctl mask --now ypserv.service
rsh-server
$ sudo dnf erase rsh-server
rsh
rlogin
disable
yes
/etc/xinetd.d/rlogin
$ sudo systemctl mask --now rlogin.socket
shosts.equiv
$ sudo rm /[path]/[to]/[file]/shosts.equiv
/etc/hosts.equiv
~/.rhosts
$ sudo rm /etc/hosts.equiv
$ rm ~/.rhosts
~/.shosts
$ sudo find / -name '.shosts' -type f -delete
talk-server
$ sudo dnf erase talk-server
talk
$ sudo dnf erase talk
telnet-server
$ sudo dnf erase telnet-server
telnet
$ sudo systemctl mask --now telnet.socket
tftp-server
$ sudo dnf erase tftp-server
tftp
$ sudo systemctl show tftp | grep FragmentPath= FragmentPath=/etc/systemd/system/tftp.service
ExecStart
-s
ExecStart=/usr/sbin/in.tftpd -s