TMA-FREEBSD-2.2.5

Ensure nis server services are not in use

AltaNivel 1Automatizadafreebsd

Descripción

The Network Information Service (NIS), formerly known as Yellow Pages, is a client- server directory service protocol used to distribute system configuration files. The NIS client ( ypbind ) was used to bind a machine to an NIS server and receive the distributed configuration files. The NIS service is inherently an insecure system that has been vulnerable to DOS attacks, buffer overflows and has poor authentication for querying NIS maps. NIS generally has been replaced by such protocols as Lightweight Directory Access Protocol (LDAP). Audit: rc.conf (sysrc) must not enable nis_server_enable.

Cómo se verifica

Método de auditoría: Comando de shell

shell

command -v sysrc >/dev/null 2>&1 || exit 1; r=compliant; for k in nis_server_enable; do v=$(sysrc -q -n $k 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) r="$k=$v";; esac; done; echo "$r"

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

sysrc nis_server_enable="NO"; then stop the service (service <name> onestop)

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: freebsdservices
Referencia: CIS FreeBSD 14 Benchmark v1.0.1 - 2.2.5 Ensure nis server services are not in use

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target freebsd