Ensure NFS and RPC are not enabled

SrednjaNivo 1Automatskalinux

Opis

The Network File System (NFS) is one of the first and most widely distributed file systems in the UNIX environment. It provides the ability for systems to mount file systems of other servers through the network.

Kako se proverava

Metod provere: Komanda ljuske

shell

alt0() { command -v systemctl >/dev/null 2>&1 || { echo "step1: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl is-enabled nfs' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- disabled || { echo step1: missing disabled; return 1; }; command -v systemctl >/dev/null 2>&1 || { echo "step2: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl status nfs' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Active: inactive (dead)' || { echo step2: missing 'Active: inactive (dead)'; return 1; }; command -v systemctl >/dev/null 2>&1 || { echo "step3: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl is-enabled nfs-server' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- disabled || { echo step3: missing disabled; return 1; }; command -v systemctl >/dev/null 2>&1 || { echo "step4: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl status nfs-server' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Active: inactive (dead)' || { echo step4: missing 'Active: inactive (dead)'; return 1; }; command -v systemctl >/dev/null 2>&1 || { echo "step5: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl is-enabled rpcbind' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- disabled || { echo step5: missing disabled; return 1; }; command -v systemctl >/dev/null 2>&1 || { echo "step6: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl status rpcbind' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Active: inactive (dead)' || { echo step6: missing 'Active: inactive (dead)'; return 1; }; }; if alt0; then echo compliant; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Run the following commands to disable nfs, nfs-server and rpcbind: # systemctl disable nfs # systemctl disable nfs-server # systemctl disable rpcbind # systemctl stop nfs # systemctl stop nfs-server # systemctl stop rpcbind

Svojstva

Operativni sistemi: alinux-2
Oznake: cis-convertedlinux
Referenca: CIS Aliyun Linux 2 Benchmark v1.0.0 ARCHIVE - 2.1.7

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target linux