Detections
Analytics

2.2.4 Ensure a dhcp server is not installed

Information

The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses.

Unless a system is specifically set up to act as a DHCP server, it is recommended that the dhcp-server package be removed to reduce the potential attack surface.

Solution

Run the following command to remove dhcp :

# dnf remove dhcp-server

See Also

https://workbench.cisecurity.org/benchmarks/12705

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 4b5715d940745d1fcddfd2942fd77af0bcc24d18a291e53cd6652fb32b4ebc5a