UCF STIG Viewer Logo

The portmap or rpcbind service must not be running unless needed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22429 GEN003810 SV-26663r1_rule ECSC-1 Medium
Description
The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap or rpcbind services are used by a variety of services using Remote Procedure Calls (RPCs).
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-27695r1_chk )
Check if the rpcbind process is running.

# ps -ef | grep rpcbind | grep -v grep

If a process is listed and is not documented as required, this is a finding.
Fix Text (F-23905r1_fix)
Shutdown and disable the RPC service.
# /etc/rc2.d/S*rpc stop
# mv /etc/rc2.d/S*rpc /etc/rc2.d/DISABLED.rpc