| name | CIS Ubuntu 14.04 LTS - 2.2.16 Ensure rsync service is not enabled |
| description | Verify that rsync service is disabled when not required |
| category | cis-os-hardening |
| version | 2.1.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu","ubuntu-14.04","level-1","scored","services"] |
| cis_id | 2.2.16 |
| cis_benchmark | CIS Ubuntu Linux 14.04 LTS Benchmark v2.1.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | low |
2.2.16 Ensure rsync service is not enabled (Scored)
Profile Applicability
- Level 1 - Server
- Level 1 - Workstation
Description
The rsyncd service can be used to synchronize files between systems over network links.
Rationale
The rsyncd service presents a security risk as it uses unencrypted protocols for communication.
Audit Procedure
Run the following command to verify that the rsync service is not enabled:
grep ^RSYNC_ENABLE /etc/default/rsync
Expected output:
RSYNC_ENABLE=false
Expected Result
The output should show RSYNC_ENABLE=false.
Remediation
Edit the /etc/default/rsync file and set RSYNC_ENABLE to false:
RSYNC_ENABLE=false
Default Value
rsync service is not enabled by default (RSYNC_ENABLE=false).
References
- CIS Controls: 9.1 Limit Open Ports, Protocols, and Services
Profile
- Level 1 - Server
- Level 1 - Workstation