Detections
Analytics

2.2.15 Ensure dnsmasq is not installed

Information

dnsmasq is a lightweight tool that provides DNS caching, DNS forwarding and DHCP (Dynamic Host Configuration Protocol) services.

Unless a system is specifically designated to act as a DNS caching, DNS forwarding and/or DHCP server, it is recommended that the package be removed to reduce the potential attack surface.

Solution

Run the following command to remove dnsmasq :

# apt purge dnsmasq

See Also

https://workbench.cisecurity.org/benchmarks/15023

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: c796a549633736ea6d4c1edf2f64ff0c72e9493724af3ccae8c5341ee1a463e9