cyberstrikeus 2.2.6 Ensure NFS is not installed (Automated)
Profile
- Level 1 - Server
- Level 1 - Workstation
Description
The Network File System (NFS) is one of the first and most widely distributed file systems in the UNIX environment. It provides the ability for systems to mount file systems of other servers through the network.
Rationale
If the system does not export NFS shares, it is recommended that the nfs-kernel-server package be removed to reduce the remote attack surface.
Audit Procedure
Command Line
Run the following command to verify nfs is not installed:
# dpkg-query -s nfs-kernel-server &>/dev/null && echo "nfs-kernel-server is installed"
Nothing should be returned.
Expected Result
No output (empty result).
Remediation
Command Line
Run the following command to remove nfs:
# apt purge nfs-kernel-server
References
- NIST SP 800-53 Rev. 5: CM-7
CIS Controls
- v8: 4.8 - Uninstall or Disable Unnecessary Services on Enterprise Assets and Software
- v7: 9.2 - Ensure Only Approved Ports, Protocols and Services Are Running