GEN003815 - The portmap or rpcbind service must not be installed unless needed - 'portmap'

Information

The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap or rpcbind services are used by a variety of services using Remote Procedure Calls (RPCs).

Solution

Remove the portmap package.
# rpm -e portmap
or
# yum remove portmap

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip