>From ae2e10547e6f46ed4c930b09296e8c5c1d78b89b Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sun, 13 Apr 2014 01:52:48 -0400 Subject: [PATCH 11/26] New RHEL6 rule: package_ypbind_removed Added in support of CIS/C2S baseline OVAL already existed. Created XCCDF. --- RHEL/6/input/services/obsolete.xml | 16 ++++++++++++++++ 1 files changed, 16 insertions(+), 0 deletions(-) diff --git a/RHEL/6/input/services/obsolete.xml b/RHEL/6/input/services/obsolete.xml index 337e2b3..604be4d 100644 --- a/RHEL/6/input/services/obsolete.xml +++ b/RHEL/6/input/services/obsolete.xml @@ -285,6 +285,22 @@ as a client in a NIS or NIS+ domain. + + +Remove NIS Client +The Network Information Service (NIS), formerly known as Yellow Pages, +is a client-server directory service protocol used to distribute system configuration +files. The NIS client (ypbind) was used to bind a machine to an NIS server +and receive the distributed configuration files. + +The NIS service is inherently an insecure system that has been vulnerable +to DOS attacks, buffer overflows and has poor authentication for querying NIS maps. +NIS generally has been replaced by such protocols as Lightweight Directory Access +Protocol (LDAP). It is recommended that the service be removed. + + + + -- 1.7.1