STIGQter: STIG Summary: Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The Ubuntu operating system must not have the Network Information Service (NIS) package installed.

DISA Rule

SV-219157r610963_rule

Vulnerability Number

V-219157

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

UBTU-18-010018

Severity

CAT I

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Configure the Ubuntu operating system to disable non-essential capabilities by removing the Network Information Service (NIS) package from the system with the following command:

# sudo apt-get remove nis

Check Contents

Verify that the Network Information Service (NIS) package is not installed on the Ubuntu operating system.

Check to see if the NIS package is installed with the following command:

# dpkg -l | grep nis

If the NIS package is installed, this is a finding.

Vulnerability Number

V-219157

Documentable

False

Rule Version

UBTU-18-010018

Severity Override Guidance

Verify that the Network Information Service (NIS) package is not installed on the Ubuntu operating system.

Check to see if the NIS package is installed with the following command:

# dpkg -l | grep nis

If the NIS package is installed, this is a finding.

Check Content Reference

M

Target Key

4055

Comments