1.7.1.7 Ensure the MCS Translation Service (mcstrans) is not installed

Information

The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf Since this service is not used very often, remove it to reduce the amount of potentially vulnerable code running on the system.

Solution

Run the following command to uninstall mcstrans: # dnf remove mcstrans

See Also

https://workbench.cisecurity.org/files/2608

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv7|9.2

Plugin: Unix

Control ID: bc53583c39e6d149b2984d3ffb3424116ade888eda4280ebe61499f95c218a4a