1.6.1.8 Ensure the MCS Translation Service (mcstrans) is not installed

Information

The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf

Rationale:

Since this service is not used very often, remove it to reduce the amount of potentially vulnerable code running on the system.

Solution

Run the following command to uninstall mcstrans:

# yum remove mcstrans

See Also

https://workbench.cisecurity.org/files/3636