Details

Removing the Network Information Service (NIS) package decreases the risk of the accidental (or intentional) activation of NIS or NIS+ services.

Solution

Configure the Ubuntu operating system to disable non-essential capabilities by removing the Network Information Service (NIS) package from the system with the following command:

# sudo apt-get remove nis

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_18-04_LTS_V2R4_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7a.
• CAT|I
• CCI|CCI-000381
• Rule-ID|SV-219157r610963_rule
• STIG-ID|UBTU-18-010018
• STIG-Legacy|SV-109643
• STIG-Legacy|V-100539
• Vuln-ID|V-219157

Source

• Tenable.com/audits