1.6.1.6 Ensure the MCS Translation Service (mcstrans) is not installed

Information

The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf

Rationale:

Since this service is not used very often, remove it to reduce the amount of potentially vulnerable code running on the system.

Solution

Uninstall mcstrans using the appropriate package manager:
OR

# yum remove mcstrans

See Also

https://workbench.cisecurity.org/files/2688

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-11, CSCv7|2.6

Plugin: Unix

Control ID: b617d776a4ec37d68eaffebe1e84b7b91592d2b64634139b59c78b0cb22f718a