Ensure Unnecessary System Services Are Disabled on TDSQL Hosts

НискаНиво 2Ручни прегледtdsql

Опис

TDSQL hosts should run only the necessary services. Unnecessary services increase the attack surface.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Run systemctl list-unit-files --type=service --state=enabled and ss -tlnp on every TDSQL host. Only TDSQL components (mysqld, oss_server, scheduler, zookeeper, gateway/proxy, agents) and required OS services may be enabled or listening; services such as cups, avahi-daemon, bluetooth or telnet are a finding.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

# Disable unnecessary services systemctl disable --now cups avahi-daemon bluetooth telnet.socket

Својства

Оперативни системи: Било који
Ознаке: tdsqlos
Референца: CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 1.8 Ensure Unnecessary System Services Are Disabled on TDSQL Hosts