2.2.4 Ensure DHCP Server is not enabled - isc-dhcp-server

Information

The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses.

Rationale:

Unless a system is specifically set up to act as a DHCP server, it is recommended that this service be deleted to reduce the potential attack surface.

Solution

Run one of the following commands to disable dhcpd:

# systemctl --now disable isc-dhcp-server

# systemctl --now disable isc-dhcp-server6

See Also

https://workbench.cisecurity.org/files/2970

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv6|9.1, CSCv7|9.2

Plugin: Unix

Control ID: 26a4bbd3d6352e713ea9f7c2a8dfd3681444d5c341b2bb8e699993bf8d5072fd