0089-dhcp-uninstalled¶

Rule ID¶

• 0089-dhcp-uninstalled

Category¶

• system

Severity¶

• warn

Supported Versions¶

• Linux

Description¶

• Dynamic Host Configuration Protocol (DHCP) is a service that allows dynamic IP address assignment for computers.

Scan Frequency¶

• 0 */30 * * *

Rationale¶

• Unless the system is specifically configured to act as a DHCP server, it is recommended to remove the DHCP software package to reduce the potential attack surface.

Risk¶

• Increased risk of attack

Audit Method¶

• Run the following command to verify that the component is not installed:

  # rpm -q dhcp
  package dhcp is not installed
  

Remediation¶

• Run the following command to remove the package:

  # yum remove dhcp
  

Impact¶

• Servers in the cluster may risk not being able to automatically obtain IP addresses and subnet masks from the server.

Default Value¶

• None

References¶

• None

CIS Controls¶

• Version 7 2.6 Address unapproved software Ensure unauthorized software is removed or the inventory is updated in a timely manner