Detections
Analytics

2.2.5 Ensure a dns server is not installed

Information

The Domain Name System (DNS) is a hierarchical naming system that maps names to IP addresses for computers, services and other resources connected to a network.

Unless a system is specifically designated to act as a DNS server, it is recommended that the package be removed to reduce the potential attack surface.

Solution

Run the following command to remove bind :

# dnf remove bind

See Also

https://workbench.cisecurity.org/benchmarks/12705

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 72eb0fa39a7556e309d0b2ab6ea1e8d9a82dfed8f40833696ed4990b804b808b