Detections
Analytics

2.2.4 Ensure DHCP Server is not installed

Information

The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses.

Unless a system is specifically set up to act as a DHCP server, it is recommended that this package be removed to reduce the potential attack surface.

Solution

Run the following command to remove isc-dhcp-server :

# apt purge isc-dhcp-server

See Also

https://workbench.cisecurity.org/benchmarks/13007

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 48bacc4df81a4f4718113c7bcfc2be38c82cef69cab056300e55930ee9967edf