TMA-SOLARIS-2.9

Disable NIS Server Services

高级别 1自动化solaris

说明

The NIS server software is not installed by default and is only required on systems that are acting as an NIS server for the local site. Typically, there are only a small number of NIS servers on any given network. These services are disabled by default unless the system has been previously configured to act as a NIS server. Audit: `svcs -Ho state` must report disabled; a service that is not installed is compliant. If LDAP is not used, also confirm svc:/network/nis/domain is disabled.

检查方式

审计方法: Shell 命令

shell

command -v svcs >/dev/null 2>&1 || exit 1; r=compliant; for f in svc:/network/nis/server; do st=$(svcs -Ho state "$f" 2>/dev/null); case "$st" in ''|disabled) ;; *) r="$f: $st";; esac; done; echo "$r"

预期输出: compliant

修复方式

修复方法: 操作指南或基础设施补丁

svcadm disable svc:/network/nis/server

属性

操作系统: 任意
标签: solarisservices
参考: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 2.9 Disable NIS Server Services

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target solaris