TMA-SOLARIS-2.8

Disable NIS Client Services

높음레벨 1자동solaris

설명

If the local site is not using the NIS naming service to distribute system and user configuration information, this service may be disabled. This service is disabled by default unless the NIS service has been installed and configured on the system. As RPC-based services such as NIS may use non-secure authentication and share sensitive network object information with systems and applications using RPC-based service, NIS client daemons should be disabled. Audit: `svcs -Ho state` must report disabled; a service that is not installed is compliant. If LDAP is not used, also confirm svc:/network/nis/domain is disabled.

점검 방법

감사 방식: 셸 명령

shell

command -v svcs >/dev/null 2>&1 || exit 1; r=compliant; for f in svc:/network/nis/client; do st=$(svcs -Ho state "$f" 2>/dev/null); case "$st" in ''|disabled) ;; *) r="$f: $st";; esac; done; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

svcadm disable svc:/network/nis/client

속성

운영 체제: 모두
태그: solarisservices
참고 자료: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 2.8 Disable NIS Client Services

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target solaris