Ensure Unnecessary System Services Are Disabled on TDSQL Hosts

NiskaNivo 2Ručni pregledtdsql

Opis

TDSQL hosts should run only the necessary services. Unnecessary services increase the attack surface.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Run systemctl list-unit-files --type=service --state=enabled and ss -tlnp on every TDSQL host. Only TDSQL components (mysqld, oss_server, scheduler, zookeeper, gateway/proxy, agents) and required OS services may be enabled or listening; services such as cups, avahi-daemon, bluetooth or telnet are a finding.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

# Disable unnecessary services systemctl disable --now cups avahi-daemon bluetooth telnet.socket

Svojstva

Operativni sistemi: Bilo koji
Oznake: tdsqlos
Referenca: CIS Tencent TDSQL 10.3.22 Benchmark v1.0.0 - 1.8 Ensure Unnecessary System Services Are Disabled on TDSQL Hosts