[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

243238

 
 

909

 
 

192833

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-90696-6

Platform: rhel7,centos7Date: (C)2017-06-29   (M)2022-10-10



Disable D-Bus IPC Service (messagebus) D-Bus provides an IPC mechanism used by a growing list of programs, such as those used for Gnome, Bluetooth, and Avahi. Due to these dependencies, disabling D-Bus may not be practical for many systems. The 'messagebus' service can be disabled with the following command: '$ sudo systemctl disable messagebus'


Parameter:


Technical Mechanism:

If no services which require D-Bus are needed, then it can be disabled. As a broker for IPC between processes of different privilege levels, it could be a target for attack. However, disabling D-Bus is likely to be impractical for any system which needs to provide a graphical login session. Fix: # # Disable messagebus.service for all systemd targets # systemctl disable messagebus.service # # Stop messagebus.service if currently running # systemctl stop messagebus.service

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:30387
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:31110


OVAL    2
oval:org.secpod.oval:def:30387
oval:org.secpod.oval:def:31110

© SecPod Technologies