Details
The Domain Name System (DNS) is a hierarchical naming system that maps names to IP addresses for computers, services and other resources connected to a network.
Rationale:
Unless a system is specifically designated to act as a DNS server, it is recommended that the package be deleted to reduce the potential attack surface.
Solution
Run the following commands to disable DNS server:
# systemctl –now disable bind9
Additional Information:
Additional methods of disabling a service exist. Consult your distribution documentation for appropriate methods.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.