CCE-94310-0| Platform: rhel8 | Date: (C)2019-11-07 (M)2022-10-10 |
Disable Red Hat Subscription Manager Daemon (rhsmcertd)
The Red Hat Subscription Manager (rhsmcertd) periodically checks for
changes in the entitlement certificates for a registered system and updates it
accordingly.
The 'rhsmcertd' service can be disabled with the following command:
'$ sudo systemctl disable rhsmcertd'
Parameter:
Technical Mechanism:
The 'rhsmcertd' service can provide administrators with some
additional control over which of their systems are entitled to particular
subscriptions. However, for systems that are managed locally or which are not
expected to require remote changes to their subscription status, it is
unnecessary and can be disabled.
Fix:
#
# Disable rhsmcertd.service for all systemd targets
#
systemctl disable rhsmcertd.service
#
# Stop rhsmcertd.service if currently running
#
systemctl stop rhsmcertd.service
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References:
