Detections
Analytics

1.6.1.8 Ensure the MCS Translation Service (mcstrans) is not installed

Information

The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf

Since this service is not used very often, remove it to reduce the amount of potentially vulnerable code running on the system.

Solution

Run the following command to uninstall mcstrans :

# dnf remove mcstrans

See Also

https://workbench.cisecurity.org/benchmarks/12705

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|CM-6, 800-53|CM-7, 800-53|SI-4, CSCv7|9.2

Plugin: Unix

Control ID: 53a7cca286be4fe777d079542e2bdcb59a342446cee5fda7fcc9257339a19d68