2.2.7 Ensure NFS and RPC are not enabled - NFS

Information

If the system does not export NFS shares or act as an NFS client, it is recommended that these services be disabled to reduce remote attack surface.

Solution

Run the following commands to disable nfs and rpcbind - # chkconfig nfs off
# chkconfig rpcbind off

See Also

https://workbench.cisecurity.org/files/1863

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|9.1

Plugin: Unix

Control ID: 958628503b1ad0558b7f8f9a9d7ce6a8fae12c8ba6b244edaa5b73acb5899e75