sandevistan-server-hardening / CIS_Ubuntu_22.04_LTS_Benchmark_v1.0.0

Audit script based on CIS Ubuntu 22.04 LTS Benchmark v1.0.0
MIT License
1 stars 0 forks source link

2.2.16 Ensure rsync service is either not installed or masked #84

Open scfast opened 1 year ago

scfast commented 1 year ago

Profile Applicability:  Level 1 - Server  Level 1 - Workstation

Description: The rsync service can be used to synchronize files between systems over network links.

Rationale: The rsync service presents a security risk as it uses unencrypted protocols for communication. The rsync package should be removed to reduce the attack area of the system.

Audit: Run the following command to verify rsync is not installed:

dpkg-query -W -f='${binary:Package}\t${Status}\t${db:Status-Status}\n' rsync
rsync unknown ok not-installed not-installed

OR Run the following commands to verify that rsync is inactive and masked:

# systemctl is-active rsync
inactive
# systemctl is-enabled rsync
masked