0076-Translation-uninstalled-mcstrans Service Installed¶
Rule ID¶
- 0076-Translation-uninstalled
Category¶
- system
Level¶
- warn
Supported Versions¶
- Linux
Description¶
- The mcstransd daemon provides category label information to client processes that request it. Label translation is defined in
/etc/selinux/targeted/setrans.conf.
Scan Frequency¶
1 */5 * * *
Rationale¶
- Since this service is rarely used, remove it to reduce the amount of potentially vulnerable code running on the system.
Risk Items¶
-
Hacker penetration
-
Data leakage
-
Cryptomining risk
-
Botnet risk
Audit Method¶
- Verify that mcstrans is not installed. Run the following command:
Remediation¶
- Run the following command to uninstall mcstrans:
Impact¶
- None
Default Value¶
- None
References¶
CIS Controls¶
- Version 7 9.2 Ensure Only Approved Ports, Protocols, and Services Are Running Ensure that only network ports, protocols, and services listening on a system with validated business needs are running on each system.