dev-sec / dev-sec/linux-baseline
disable rpcbind
Nobody has claimed this yet.
- Dominant language
- Ruby
- Stars
- 875
- Forks
- 193
- Avg merge
- 9m
- Merged PRs (30d)
- 1
Description
Is your feature request related to a problem? Please describe.
I received a notice of a open rpcbind port on my fresh installed Debian 10.6 system yesterday.
The rpcbind port is normally used for nfs mounts. In hacks this port 111 is mostly used for ddos reflection attacks.
Describe the solution you'd like
I would like a variable which controls if the port is closed or not. The variable could set if the service is stopped and disabled or started and enabled.
Describe alternatives you've considered
An alternative would be to get a list of services you want to disable by default. Maybe there is another daemon like avahi-daemon or cups.
Additional context
If you need more information, just reply.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing how the Debian 10.6 rpcbind service exposes port 111 and how the profile currently handles optional daemons. The work is done when a variable controls whether rpcbind is stopped and disabled or started and enabled, with the resulting port state matching that choice.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- debian, linux
- Domain
- operating-systems, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100