Ensure nis server services are not in use

AltaNível 1Automatizadafreebsd

Descrição

The Network Information Service (NIS), formerly known as Yellow Pages, is a client- server directory service protocol used to distribute system configuration files. The NIS client ( ypbind ) was used to bind a machine to an NIS server and receive the distributed configuration files. The NIS service is inherently an insecure system that has been vulnerable to DOS attacks, buffer overflows and has poor authentication for querying NIS maps. NIS generally has been replaced by such protocols as Lightweight Directory Access Protocol (LDAP). Audit: rc.conf (sysrc) must not enable nis_server_enable.

Como é verificado

Método de auditoria: Comando shell

shell

command -v sysrc >/dev/null 2>&1 || exit 1; r=compliant; for k in nis_server_enable; do v=$(sysrc -q -n $k 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) r="$k=$v";; esac; done; echo "$r"

Saída esperada: compliant

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

sysrc nis_server_enable="NO"; then stop the service (service <name> onestop)

Propriedades

Sistemas operacionais: Qualquer
Tags: freebsdservices
Referência: CIS FreeBSD 14 Benchmark v1.0.1 - 2.2.5 Ensure nis server services are not in use

Verificar este host

Execute isto em uma máquina que você tenha permissão para auditar. A varredura é somente leitura.

shell

tmaegis scan --target freebsd