4.4.1.1 NIS - de-install NIS client

Information

If NIS is not used in the environment, disable the NIS client and de-install the software.

Rationale:

As NIS is extremely insecure, the NIS client packages must be removed from the system unless absolutely needed.

Solution

Ensure that all of the NIS daemons are inactive:

stopsrc -g yp

De-install the NIS client software:

installp -u bos.net.nis.client

Default Value:

N/A

Additional Information:

Reversion:

Re-install the software from the product DVD's.

See Also

https://workbench.cisecurity.org/benchmarks/13069

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7

Plugin: Unix

Control ID: b1a3dd6bd55e38b4d88040bb16c7db474025d20d23966f76ea77e80bcb13ea15