0092-dns-uninstalled - DNS Installed¶

Rule ID¶

• 0092-dns-uninstalled

Category¶

• system

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• The Domain Name System (DNS) is a hierarchical naming system that maps names to IP addresses of computers, services, and other resources connected to the network.

Scan Frequency¶

• 0 */30 * * *

Rationale¶

• Unless a system is specifically designated as a DNS server, it is recommended to remove the package to reduce the potential attack surface.

Risk¶

• Increased risk of attack

Audit Method¶

• Run the following command to verify that the corresponding component is not installed:

  # rpm -q bind
  package bind is not installed
  

Remediation¶

• Run the following command to remove the corresponding package:

  # yum remove bind
  

Impact¶

• If you are using this server as a DNS server, the cluster may lose domain name resolution capability.

Default Value¶

• None

References¶

• None

CIS Controls¶

• Version 7 9.2 Ensure only approved ports, protocols, and services are running Ensure only the network ports, protocols, and services with validated business needs are listening on each system.