V-867

CAT II (Medium)

The Network Information System (NIS) protocol must not be used.

Rule ID

SV-46282r1_rule

STIG

Version

V1R12

CCIs

Due to numerous security vulnerabilities existing within NIS, it must not be used. Possible alternative directory services are NIS+ and LDAP.

Perform the following to determine if NIS is active on the system:

# ps -ef | grep ypbind

If NIS is found active on the system, this is a finding.

Disable the use of NIS. Use as a replacement NIS+ or LDAP.