Details

Although systems management and patching is extremely important to system security, management by a system outside the enterprise enclave is not desirable for some environments. However, if the system needs to communicate with the Oracle Unbreakable Linux Network for updates or information, then the ‘rhnsd’ daemon can remain on.

Solution

This service automatically queries the Oracle Unbreakable Linux Network service to determine whether there are any software updates or related information. The ‘rhnsd’ service can be disabled with the following commands:

# chkconfig rhnsd off
# service rhnsd stop

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_6_V1R18_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CAT|III
• CCI|CCI-000382
• CSCv6|9.1
• Group-ID|V-50693
• Rule-ID|SV-208797r603263_rule
• STIG-ID|OL6-00-000009
• STIG-Legacy|SV-64899
• STIG-Legacy|V-50693
• Vuln-ID|V-208797

Source

• Tenable.com/audits