Detections
Analytics

SOL-11.1-030040 - Systems services that are not required must be disabled.

Information

Services that are enabled but not required by the mission may provide excessive access or additional attack vectors to penetrate the system.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

The Service Management profile is required:

Disable any other service not required.

# pfexec svcadm disable [service name]

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_x86_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216082r959010_rule, STIG-ID|SOL-11.1-030040, STIG-Legacy|SV-60805, STIG-Legacy|V-47933, Vuln-ID|V-216082

Plugin: Unix

Control ID: bb286f53bd3ff58d67815e98d702b081a0b591acd3823bec468a7ae7d9ca0f7f