1. Home
  2. Security Hardening
  3. CIS Distribution Independent Linux Server L2 V2.0.0
  4. Ensure the MCS Translation Service (mcstrans) is not installed

Ensure the MCS Translation Service (mcstrans) is not installed

Details

The mcstransd daemon provides category label information to client processes requesting

information. The label translations are defined in /etc/selinux/targeted/setrans.conf

Rationale:

Since this service is not used very often, remove it to reduce the amount of potentially

vulnerable code running on the system.

Solution

Uninstall mcstrans using the appropriate package manager or manual installation:

yum remove mcstrans

apt-get remove mcstrans

zypper remove mcstrans

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles