1.70 SOL-11.1-030040

Information

Systems services that are not required must be disabled.

GROUP ID: V-216317
RULE ID: SV-216317r959010

Services that are enabled but not required by the mission may provide excessive access or additional attack vectors to penetrate the system.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

The Service Management profile is required:

Disable any other service not required.

# pfexec svcadm disable [service name]

See Also

https://workbench.cisecurity.org/benchmarks/23765