RHEL-06-000267 - The qpidd service must not be running - CHKCONFIG.

Information

The qpidd service is automatically installed when the 'base' package selection is selected during installation. The qpidd service listens for network connections which increases the attack surface of the system. If the system is not intended to receive AMQP traffic then the 'qpidd' service is not needed and should be disabled or removed.

Solution

The 'qpidd' service provides high speed, secure, guaranteed delivery services. It is an implementation of the Advanced Message Queuing Protocol. By default the qpidd service will bind to port 5672 and listen for connection attempts. The 'qpidd' service can be disabled with the following commands:

# chkconfig qpidd off
# service qpidd stop

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_6_V2R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CAT|III, CCI|CCI-000382, Rule-ID|SV-218019r603264_rule, STIG-ID|RHEL-06-000267, STIG-Legacy|SV-50449, STIG-Legacy|V-38648, Vuln-ID|V-218019

Plugin: Unix

Control ID: d2ee56924c71abaffb16d2ec5c7ad1994ad71c77591ae10cdd3d4ad96770580f