1.2.5 Disable the rhnsd Daemon

Information

The rhnsd daemon polls the Red Hat Network web site for scheduled actions and, if there are, executes those actions.

Rationale:

Patch management policies may require that organizations test the impact of a patch before it is deployed in a production environment. Having patches automatically deployed could have a negative impact on the environment. It is best to not allow an action by default but only after appropriate consideration has been made. It is recommended that the service be disabled unless the risk is understood and accepted or you are running your own satellite .

Note: This item is not scored because organizations may have addressed the risk.

Impact:

Run the following command:

# systemctl is-enabled rhnsd



Output should NOT be enabled

Solution

Run the following command to stop and mask the rhnsd:

# systemctl --now mask rhnsd

See Also

https://workbench.cisecurity.org/files/3393