← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-22430

CAT II (Medium)

The portmap or rpcbind service must not be installed unless needed.

Rule ID

SV-45786r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000305

Discussion

The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap or rpcbind services are used by a variety of services using Remote Procedure Calls (RPCs).

Check Content

Check if the portmap and/or rpcbind packages are installed.
# rpm –q portmap rpcbind

If a package is found, this is a finding.

Fix Text

Remove the portmap and/or rpcbind packages.
# rpm -e portmap rpcbind
# SuSEconfig