0076-Translation-uninstalled-mcstrans Service Installed¶

Rule ID¶

• 0076-Translation-uninstalled

Category¶

• System

Level¶

• Warn

Compatible Versions¶

• Linux

Description¶

• The mcstransd daemon provides category label information to client processes that request it. Label translation is defined in /etc/selinux/targeted/setrans.conf.

Scan Frequency¶

• 1 */5 * * *

Theoretical Basis¶

• Since this service is not frequently used, uninstall it to reduce the amount of potentially vulnerable code running on the system.

Risk Items¶

• Hacker penetration

• Data leakage

• Mining risk

• Compromised machine risk

Audit Method¶

• Verify that mcstrans is not installed. Run the following command:

# rpm -q mcstrans
package mcstrans is not installed

Remediation¶

• Run the following command to uninstall mcstrans:

# yum remove mcstrans

Impact¶

• None

Default Value¶

• None

References¶

CIS Control¶

• Version 7 9.2 Ensure Only Approved Ports, Protocols, and Services Are Running Ensure that only network ports, protocols, and services with validated business needs are listening on each system.