Rule ID
SV-216317r959010_rule
Version
V3R5
CCIs
Services that are enabled but not required by the mission may provide excessive access or additional attack vectors to penetrate the system.
Determine all of the systems services that are enabled on the system. # svcs -a | grep online Document all enabled services and disable any that are not required.
The Service Management profile is required: Disable any other service not required. # pfexec svcadm disable [service name]