TMA-FREEBSD-2.2.5

Ensure nis server services are not in use

TinggiLevel 1Otomatisfreebsd

Deskripsi

The Network Information Service (NIS), formerly known as Yellow Pages, is a client- server directory service protocol used to distribute system configuration files. The NIS client ( ypbind ) was used to bind a machine to an NIS server and receive the distributed configuration files. The NIS service is inherently an insecure system that has been vulnerable to DOS attacks, buffer overflows and has poor authentication for querying NIS maps. NIS generally has been replaced by such protocols as Lightweight Directory Access Protocol (LDAP). Audit: rc.conf (sysrc) must not enable nis_server_enable.

Cara pemeriksaan

Metode audit: Perintah shell

shell

command -v sysrc >/dev/null 2>&1 || exit 1; r=compliant; for k in nis_server_enable; do v=$(sysrc -q -n $k 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) r="$k=$v";; esac; done; echo "$r"

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

sysrc nis_server_enable="NO"; then stop the service (service <name> onestop)

Properti

Sistem operasi: Apa saja
Tag: freebsdservices
Referensi: CIS FreeBSD 14 Benchmark v1.0.1 - 2.2.5 Ensure nis server services are not in use

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target freebsd