Disable MCS Translation Service (mcstrans)

Details

The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf

Rationale:

Since this service is not used very often, disable it to reduce the amount of potentially vulnerable code running on the system.

Solution

Run the following command to disable mcstrans:

# chkconfig mctrans off

Default Value:

OS Default: No

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles