2.2.7 Ensure DNS Server is not enabled

Information

The Domain Name System (DNS) is a hierarchical naming system that maps names to IP addresses for computers, services and other resources connected to a network.

Rationale:

Unless a system is specifically designated to act as a DNS server, it is recommended that the package be deleted to reduce the potential attack surface.

Solution

Run the following commands to disable DNS server:

# systemctl --now disable bind9

Additional Information:

Additional methods of disabling a service exist. Consult your distribution documentation for appropriate methods.

See Also

https://workbench.cisecurity.org/files/2970

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv6|9.1, CSCv7|9.2

Plugin: Unix

Control ID: 4e1ccd586e153be16c7c663a7642576a4b635e68d6e077130d1f3379ddf92941