STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must not have the nfs-kernel-server package installed.

DISA Rule

SV-279938r1156367_rule

Vulnerability Number

V-279938

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

UBTU-24-100050

Severity

CAT I

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Configure Ubuntu 24.04 LTS to disable non-essential capabilities by removing the nfs-common and nfs-kernel-server packages from the system with the following commands:

Remove packages if present:
$ sudo apt purge --yes nfs-common nfs-kernel-server

Remove any unneeded dependencies
$ sudo apt autoremove --yes

Verify NFS services are gone:
$ sudo systemctl list-units --type=service | grep nfs

Check Contents

Verify Ubuntu 24.04 LTS does not have nfs packages installed.

Check if packages are installed:
$sudo dpkg -l | grep -E 'nfs-common | nfs-kernel-server'

If the nfs-common or nfs-kernel-server packages are installed, this is a finding

Vulnerability Number

V-279938

Documentable

False

Rule Version

UBTU-24-100050

Severity Override Guidance

Verify Ubuntu 24.04 LTS does not have nfs packages installed.

Check if packages are installed:
$sudo dpkg -l | grep -E 'nfs-common | nfs-kernel-server'

If the nfs-common or nfs-kernel-server packages are installed, this is a finding

Check Content Reference

M

Target Key

5673