2.1.5 Ensure DHCP Server is not installed

Information

The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses.

Rationale:

Unless a system is specifically set up to act as a DHCP server, it is recommended that this package be removed to reduce the potential attack surface.

Solution

Run the following command to remove isc-dhcp-server:

# apt purge isc-dhcp-server

See Also

https://workbench.cisecurity.org/files/3219

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv7|9.2

Plugin: Unix

Control ID: e237aff7c9d433acd0dc72b7bb675c6f7e9965f65b76872f0dad84491d779824