Detections
Analytics

1.2.5 Disable the rhnsd Daemon

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The rhnsd daemon polls the Red Hat Network web site for scheduled actions and, if there are, executes those actions.

Rationale:

Patch management policies may require that organizations test the impact of a patch before it is deployed in a production environment. Having patches automatically deployed could have a negative impact on the environment. It is best to not allow an action by default but only after appropriate consideration has been made. It is recommended that the service be disabled unless the risk is understood and accepted or you are running your own satellite .

Note: This item is not scored because organizations may have addressed the risk.

Solution

Run the following command to stop and mask the rhnsd:

# systemctl --now mask rhnsd

See Also

https://workbench.cisecurity.org/files/2948

Item Details

References: CSCv7|9.2

Plugin: Unix

Control ID: ec314bfa8801be012cd5f1268facb1aeb3f1397535fddc3f7fa14782e6b5b376