Show pageOld revisionsBacklinksBack to top This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong. ======2.2.5 Ensure DHCP Server is not enabled (Scored)====== =====Profile Applicability===== <code> Level 1 - Server Level 1 - Workstation </code> =====Description===== The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. =====Rationale===== Unless a system is specifically set up to act as a DHCP server, it is recommended that this service be deleted to reduce the potential attack surface. =====Audit===== Run the following commands to verify ''dhcpd'' is not enabled: <Code:bash> # systemctl is-enabled dhcpd disabled </Code> Verify result is not "enabled". =====Remediation===== Run the following command to disable ''dhcpd'': <Code:bash> # systemctl disable dhcpd </Code> =====References===== More detailed documentation on DHCP is available at http://www.isc.org/software/dhcp. centos7/2/2/5.txt Last modified: 2017/05/04 15:57by 127.0.0.1