2.1.8 Ensure DNS Server is not installed

Information

The Domain Name System (DNS) is a hierarchical naming system that maps names to IP addresses for computers, services and other resources connected to a network.

Rationale:

Unless a system is specifically designated to act as a DNS server, it is recommended that the package be deleted to reduce the potential attack surface.

Solution

Run the following commands to disable DNS server:

# apt purge bind9

See Also

https://workbench.cisecurity.org/files/3219

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv7|9.2

Plugin: Unix

Control ID: b02e6b3e002e9708ccaff7beaa2e37c6665d8ca5ec7e5751937c5feb4c3eb6ed