Ensure rsyncd service is disabled
An XCCDF Rule
Description
The rsyncd service can be disabled with the following command:
$ sudo systemctl mask --now rsyncd.service
Rationale
The rsyncd service presents a security risk as it uses unencrypted protocols for communication.
- ID
- xccdf_org.ssgproject.content_rule_service_rsyncd_disabled
- Severity
- Medium
- References
- Updated
Remediation - OS Build Blueprint
[customizations.services]
disabled = ["rsyncd"]
Remediation - Ansible
- name: Block Disable service rsyncd
block:
- name: Disable service rsyncd
block:
Remediation - Puppet
include disable_rsyncd
class disable_rsyncd {
service {'rsyncd':
enable => false,
ensure => 'stopped',