disable rpcbind
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- debian, linux
- Domain
- operating-systems, security
Research direction
Start by reviewing how the Debian 10.6 rpcbind service exposes port 111 and how the profile currently handles optional daemons. The work is done when a variable controls whether rpcbind is stopped and disabled or started and enabled, with the resulting port state matching that choice.
Written by the indexing model from the issue text.
Description
Is your feature request related to a problem? Please describe.
I received a notice of a open rpcbind port on my fresh installed Debian 10.6 system yesterday.
The rpcbind port is normally used for nfs mounts. In hacks this port 111 is mostly used for ddos reflection attacks.
Describe the solution you'd like
I would like a variable which controls if the port is closed or not. The variable could set if the service is stopped and disabled or started and enabled.
Describe alternatives you've considered
An alternative would be to get a list of services you want to disable by default. Maybe there is another daemon like avahi-daemon or cups.
Additional context
If you need more information, just reply.
- Dominant language
- Ruby
- Stars
- 875
- Forks
- 193
- Avg merge
- 9m
- Merged PRs (30d)
- 1
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from dev-sec/linux-baseline
-
enhancement
Difficulty 4/5 3-5 days Newbie friendliness 48/100
dev-sec/linux-baseline#191 · 2 comments ·
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 58/100
dev-sec/linux-baseline#188 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 48/100
dev-sec/linux-baseline#173 · 6 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
dev-sec/linux-baseline#161 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
dev-sec/linux-baseline#140 · 7 comments · 5 reactions ·
All issues in dev-sec/linux-baseline
Similar issues
-
user-reported
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
Kong/developer.konghq.com#7316 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
TheOdinProject/curriculum#31408 ·
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
notch8/utk_knapsack#148 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 78/100
Homebrew/homebrew-cask#288729 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100