The portmap or rpcbind service must not be running unless needed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-220038	GEN003810	SV-220038r603265_rule		Medium

Description
The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap or rpcbind services are used by a variety of services using remote procedure calls (RPCs).

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-21747r485035_chk )
Check the status of the rpcbind service. # svcs network/rpc/bind If the service is online and is not documented as required, this is a finding.

Fix Text (F-21746r485036_fix)
Disable the portmap service. # svcadm disable network/rpc/bind