3.1.1.5 rcnfs

Information

The rcnfs entry starts the NFS daemons during system boot.

Rationale:

NFS is a service with numerous historical vulnerabilities and should not be enabled unless there is no alternative. If NFS serving is required, then read-only exports are recommended and no filesystem or directory should be exported with root access. Unless otherwise required the NFS daemons will be disabled.

Solution

Use the rmitab command to remove the NFS start-up script from /etc/inittab:

rmitab rcnfs

Default Value:

Uncommented

See Also

https://workbench.cisecurity.org/files/4119

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: ea49eaba4033ae1024d7f3de229c04d5396bcf8dbcb68f7814a271245f5bfbd9