GEN003810 - The portmap or rpcbind service must not be running unless needed - 'portmap chkconfig'

Information

The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap or rpcbind services are used by a variety of services using Remote Procedure Calls (RPCs).

Solution

Shutdown and disable the portmap service.
# service portmap stop; chkconfig portmap off

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip