Details

The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf Since this service is not used very often, remove it to reduce the amount of potentially vulnerable code running on the system.

NOTE – SELinux does not appear to be installed.

Solution

Run the following command to uninstall mcstrans: # zypper remove mcstrans

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1864https://workbench.cisecurity.org/files/1864

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.

Source

• Tenable.com/audits