Detections
Analytics

1.249 ALMA-09-031150

Information

AlmaLinux OS 9 must not have the ypserv package installed.

GROUP ID: V-269355
RULE ID: SV-269355r1155253

The NIS service provides an unencrypted authentication service, which does not provide for the confidentiality and integrity of user passwords or the remote session.

Removing the "ypserv" package decreases the risk of the accidental (or intentional) activation of NIS or NIS+ services.

Solution

Remove the ypserv package with the following command:

$ dnf remove ypserv

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-269355r1155253_rule, STIG-ID|ALMA-09-031150, Vuln-ID|V-269355

Plugin: Unix

Control ID: 53c0aab62a506bfa81d5830060173a483e6355d2b5c08c74be91d13a2d1fc2c5