Detections
Analytics

2.2.15 Ensure dnsmasq is not installed

Information

dnsmasq is a lightweight tool that provides DNS caching, DNS forwarding and DHCP (Dynamic Host Configuration Protocol) services.

Unless a system is specifically designated to act as a DNS caching, DNS forwarding and/or DHCP server, it is recommended that the package be removed to reduce the potential attack surface.

Solution

Run the following command to remove dnsmasq :

# apt purge dnsmasq

See Also

https://workbench.cisecurity.org/benchmarks/13007

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 2cd74756517e2a89a867d09e266ece8e4e158e657e1451fd4d5ca3fa3c170a78