1.6.1.5 Ensure the MCS Translation Service (mcstrans) is not installed (Scored)
Profile Applicability
Level 2 - Server Level 2 - Workstation
Description
The mcstransd
daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf
Rationale
Since this service is not used very often, remove it to reduce the amount of potentially vulnerable code running on the system.
Audit
Run the following command and verify mcstrans
is not installed:
# rpm -q mcstrans package mcstrans is not installed
Remediation
Run the following command to uninstall mcstrans
:
# yum remove mcstrans