1.6.2.5 Ensure the MCS Translation Service (mcstrans) is not installed

Information

The mcstransd daemon provides category label information to client processes requesting
information. The label translations are defined in /etc/selinux/targeted/setrans.conf

Rationale:

Since this service is not used very often, remove it to reduce the amount of potentially
vulnerable code running on the system.

Solution

Uninstall mcstrans using the appropriate package manager or manual installation:

yum remove mcstrans

apt-get remove mcstrans

zypper remove mcstrans

See Also

https://workbench.cisecurity.org/files/2420

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv6|9.1, CSCv7|9.2

Plugin: Unix

Control ID: bce5f7cc2dd1cfc1c6ffed080db5bdc1ff44485fa82591e11ad8ba99c0657522