Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-28440 | GEN005720 | SV-927r2_rule | Medium |
Description |
---|
If clients are not required to use privileged ports to get NFS services, then exported file systems may be in danger of mounting by malicious users and intruders that do not have access to privileged ports. |
STIG | Date |
---|---|
UNIX SRG | 2013-03-26 |
Check Text ( C-854r2_chk ) |
---|
Determine if the NFS service accepts requests from unprivileged ports. If it does, this is a finding. |
Fix Text (F-1081r2_fix) |
---|
Configure the system to not accept NFS requests from unprivileged ports. |