Systems services that are not required must be disabled.
Overview
| Finding ID |
Version |
Rule ID |
IA Controls |
Severity |
| V-216082 |
SOL-11.1-030040 |
SV-216082r959010_rule |
|
Low |
| Description |
| Services that are enabled but not required by the mission may provide excessive access or additional attack vectors to penetrate the system. |
Details
| Check Text (C-17320r372628_chk) |
Determine all of the systems services that are enabled on the system.
# svcs -a | grep online
Document all enabled services and disable any that are not required. |
| Fix Text (F-17318r372629_fix) |
The Service Management profile is required:
Disable any other service not required.
# pfexec svcadm disable [service name] |