4.6 Ensure nfs server is not running

Information

File serving should not be done from a user desktop, dedicated servers should be used. Open ports make it easier to exploit the computer.

Solution

Ensure that the NFS Server is not running and is not set to start at boot
Stop the NFS Server
sudo nfsd disable
Remove the exported Directory listing
rm /etc/export

See Also

https://workbench.cisecurity.org/files/301

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|9.1

Plugin: Unix

Control ID: 1f7b1f376237939056e61f62094c4ac16c5985d49df3755bf349a5d392404cd8