Detections
Analytics

2.2.8 Ensure DNS Server is not enabled

Information

Unless a system is specifically designated to act as a DNS server, it is recommended that the service be disabled to reduce the potential attack surface.

Solution

Run the following command to disable named - # chkconfig named off

See Also

https://workbench.cisecurity.org/files/1863

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|9.1

Plugin: Unix

Control ID: 31c534b6c73d2081b0ca9bd7732896dca6db23c9a2c0b7250c59b9409a8c746b