Detections
Analytics

1.3.1.7 Ensure the MCS Translation Service (mcstrans) is not installed

Information

The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf

Since this service is not used very often, remove it to reduce the amount of potentially vulnerable code running on the system.

Solution

Run the following command to uninstall mcstrans :

# dnf remove mcstrans

See Also

https://workbench.cisecurity.org/benchmarks/27891

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|CM-6, 800-53|CM-7, 800-53|MP-2, CSCv7|9.2

Plugin: Unix

Control ID: f6102e2479807d0149e3d16db24be8b3546e9d4abc297c15825bc4e338ed9abd