Disable NIS Client Services

TinggiLevel 1Otomatissolaris

Deskripsi

If the local site is not using the NIS naming service to distribute system and user configuration information, this service may be disabled. This service is disabled by default unless the NIS service has been installed and configured on the system. As RPC-based services such as NIS may use non-secure authentication and share sensitive network object information with systems and applications using RPC-based service, NIS client daemons should be disabled. Audit: `svcs -Ho state` must report disabled; a service that is not installed is compliant. If LDAP is not used, also confirm svc:/network/nis/domain is disabled.

Cara pemeriksaan

Metode audit: Perintah shell

shell

command -v svcs >/dev/null 2>&1 || exit 1; r=compliant; for f in svc:/network/nis/client; do st=$(svcs -Ho state "$f" 2>/dev/null); case "$st" in ''|disabled) ;; *) r="$f: $st";; esac; done; echo "$r"

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

svcadm disable svc:/network/nis/client

Properti

Sistem operasi: Apa saja
Tag: solarisservices
Referensi: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 2.8 Disable NIS Client Services

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target solaris