4.3.1.5 Ensure rcnfs service is not in use

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The rcnfs entry starts the NFS, NIS and automount daemons during system boot. Additionally, it automounts filesystems with the attribute vfs = nfs

NFS is a service with numerous historical vulnerabilities and should not be enabled unless there is no alternative

Solution

Use the rmitab command to remove the NFS start-up script from /etc/inittab :

rmitab rcnfs

Also, to be certain NFS related services have been discounted - execute the following script:

/etc/nfs.clean

See Also

https://workbench.cisecurity.org/benchmarks/10385