STIGUI
V-282479CAT II — Medium severitySV-282479r1200417_rule

TOSS 5 must not have the ypserv package installed.

Rule version TOSS-05-000123 · STIG v1 · 2026-08-20

Discussion

The NIS service provides an unencrypted authentication service, which does not provide for the confidentiality and integrity of user passwords or the remote session.

Removing the "ypserv" package decreases the risk of the accidental (or intentional) activation of NIS or NIS+ services.

Check

Verify the "ypserv" package is not installed using the following command:

$ sudo dnf list --installed ypserv

Error: No matching Packages to list

If the "ypserv" package is installed, this is a finding.

Fix

Remove the "ypserv" package using the following command:

$ sudo dnf remove ypserv

Identifiers

Group ID
V-282479
Group title
SRG-OS-000095-GPOS-00049
Rule ID
SV-282479r1200417_rule
Check ID
C-87040r1200415_chk
Fix ID
F-86945r1200416_fix