CCE-90760-0| Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Disable Network File System (nfs)
The Network File System (NFS) service allows remote hosts to mount
and interact with shared filesystems on the local machine. If the local machine
is not designated as a NFS server then this service should be disabled.
The 'nfs' service can be disabled with the following command:
'$ sudo systemctl disable nfs'
Parameter:
Technical Mechanism:
Unnecessary services should be disabled to decrease the attack surface of the system.
Fix:
#
# Disable nfs.service for all systemd targets
#
systemctl disable nfs.service
#
# Stop nfs.service if currently running
#
systemctl stop nfs.service
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30449 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31172 |
