search

trimstray / the-practical-linux-hardening-guide

This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).
MIT License
9.91k stars 611 forks source link

Content for Disable all unnecessary services Section #5

Closed rmishra-ror closed 5 years ago

rmishra-ror commented 5 years ago

Disable all unnecessary services

The action in this section provide guidance on some of unwanted applications and services which you might not needed but they are installed by default during OS installation and unknowingly start eating your system resources and also threats to the system security. If unused services is not enabled then it can not be exploited.

:eight_pointed_black_star: Common Unix Print System

The Common Unix Print System (CUPS) provides the ability to print to both local and network printers.If the system does not need to accept print jobs from other systems, it's recommended that CUPS be disabled to reduce the potential attack.

Run the following command to verify cups is not enabled:

# systemctl is-enabled cups
disabled

Run the following command to disable cups :

# systemctl disable cups

References: http://www.cups.org

rmishra-ror commented 5 years ago

@trimstray Can I submit PRs for Disable all unnecessary services section

trimstray commented 5 years ago

Dear @rmishra-ror!

Please add pull-request with this, ok? Nice work :+1:

trimstray commented 5 years ago

I am waiting for more! :1st_place_medal: