STIGQter STIGQter: STIG Summary: BIND 9.x Security Technical Implementation Guide Version: 3 Release: 3 Benchmark Date: 01 Jul 2026:

The BIND 9.x name server software must run with restricted privileges.

DISA Rule

SV-272413r1156958_rule

Vulnerability Number

V-272413

Group Title

SRG-APP-000516-DNS-000105

Rule Version

BIND-9X-001600

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the BIND 9.x process to run as a nonprivileged user.

Restart the BIND 9.x process.

Check Contents

Verify the BIND 9.x process is not running as root:

# ps -ef | grep named

named 3015 1 0 12:59 ? 00:00:00 /usr/sbin/named -u named -t /var/named/chroot

If the owner of the process is root, this is a finding.

Vulnerability Number

V-272413

Documentable

False

Rule Version

BIND-9X-001600

Severity Override Guidance

Verify the BIND 9.x process is not running as root:

# ps -ef | grep named

named 3015 1 0 12:59 ? 00:00:00 /usr/sbin/named -u named -t /var/named/chroot

If the owner of the process is root, this is a finding.

Check Content Reference

M

Target Key

5687