Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rule 2.2.17 needs to mask the service as well as the socket #22

Closed
DianaMariaDDM opened this issue Dec 21, 2023 · 0 comments
Closed

Rule 2.2.17 needs to mask the service as well as the socket #22

DianaMariaDDM opened this issue Dec 21, 2023 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@DianaMariaDDM
Copy link
Contributor

Describe the Issue
The implementation of this control lacks one of the things that CIS considers necessary for the rule to be compliant.

Expected Behavior
As stated in the "Remediation" section of this rule, CIS mentions that if the rpcbind package is required as a dependency, one should stop and mask both the rpcbind.service and rpcbind.socket systemd units.

Actual Behavior
At this moment the tasks are written to only stop and mask the rpcbind.socket, which leads to a "FAIL" result from CIS.

Control(s) Affected
2.2.17 Ensure rpcbind is not installed or the rpcbind services are masked

Environment (please complete the following information):

  • branch being used: [e.g. devel]

Additional Notes
Anything additional goes here

Possible Solution
The tasks for this control need to stop and mask the rpcbind.service as well as the rpcbind.socket. This solution will be provided in a PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants