https://secscan.acron.pl/ 2026-08-31T09:45:02+00:00 https://secscan.acron.pl/ https://secscan.acron.pl/lib/tpl/bootstrap3/images/favicon.ico text/html 2017-05-06T15:21:44+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/1?rev=1494076904&do=diff 2.2.1 Time Synchronization List of content 1 index Description It is recommended that physical systems and virtual guests lacking direct access to the physical host's clock be configured to synchronize their time using a service such as NTP or chrony. text/html 2017-05-04T15:55:22+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/2?rev=1493906122&do=diff 2.2.2 Ensure X Window System is not installed (Scored) Profile Applicability Description The X Window System provides a Graphical User Interface (GUI) where users can have multiple windows in which to run programs and various add on. The X Windows system is typically used on workstations where users login, but not on servers where users typically do not login. text/html 2017-05-04T15:56:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/3?rev=1493906176&do=diff 2.2.3 Ensure Avahi Server is not enabled (Scored) Profile Applicability Description Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For example, a user can plug a computer into a network and Avahi automatically finds printers to print to, files to look at and people to talk to, as well as network services running on… text/html 2017-05-04T15:56:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/4?rev=1493906208&do=diff 2.2.4 Ensure CUPS is not enabled (Scored) Profile Applicability Description The Common Unix Print System (CUPS) provides the ability to print to both local and network printers. A system running CUPS can also accept print jobs from remote systems and print them to local printers. It also provides a web based remote administration capability. text/html 2017-05-04T15:57:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/5?rev=1493906256&do=diff 2.2.5 Ensure DHCP Server is not enabled (Scored) Profile Applicability Description The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. Rationale Unless a system is specifically set up to act as a DHCP server, it is recommended that this service be deleted to reduce the potential attack surface. text/html 2017-05-04T16:45:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/6?rev=1493909106&do=diff 2.2.6 Ensure LDAP server is not enabled (Scored) Profile Applicability Description The Lightweight Directory Access Protocol (LDAP) was introduced as a replacement for NIS/YP. It is a service that provides a method for looking up information from a central database. text/html 2017-05-04T16:45:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/7?rev=1493909154&do=diff 2.2.7 Ensure NFS and RPC are not enabled (Scored) Profile Applicability Description The Network File System (NFS) is one of the first and most widely distributed file systems in the UNIX environment. It provides the ability for systems to mount file systems of other servers through the network. text/html 2017-05-04T16:46:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/8?rev=1493909208&do=diff 2.2.8 Ensure DNS Server is not enabled (Scored) Profile Applicability Description The Domain Name System (DNS) is a hierarchical naming system that maps names to IP addresses for computers, services and other resources connected to a network. Rationale text/html 2017-05-04T16:47:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/9?rev=1493909236&do=diff 2.2.9 Ensure FTP Server is not enabled (Scored) Profile Applicability Description The File Transfer Protocol (FTP) provides networked computers with the ability to transfer files. Rationale FTP does not protect the confidentiality of data or authentication credentials. It is recommended sftp be used if file transfer is required. Unless there is a need to run the system as a text/html 2017-05-04T16:48:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/10?rev=1493909288&do=diff 2.2.10 Ensure HTTP server is not enabled (Scored) Profile Applicability Description HTTP or web servers provide the ability to host web site content. Rationale Unless there is a need to run the system as a web server, it is recommended that the package be deleted to reduce the potential attack surface. text/html 2017-05-04T16:48:44+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/11?rev=1493909324&do=diff 2.2.11 Ensure IMAP and POP3 server is not enabled (Scored) Profile Applicability Description dovecot is an open source IMAP and POP3 server for Linux based systems. Rationale Unless POP3 and/or IMAP servers are to be provided by this system, it is recommended that the service be deleted to reduce the potential attack surface. text/html 2017-05-04T16:49:14+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/12?rev=1493909354&do=diff 2.2.12 Ensure Samba is not enabled (Scored) Profile Applicability Description The Samba daemon allows system administrators to configure their Linux systems to share file systems and directories with Windows desktops. Samba will advertise the file systems and directories via the Small Message Block (SMB) protocol. Windows desktop users will be able to mount these directories and file systems as letter drives on their systems. text/html 2017-05-04T16:50:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/13?rev=1493909408&do=diff 2.2.13 Ensure HTTP Proxy Server is not enabled (Scored) Profile Applicability Description Squid is a standard proxy server used in many distributions and environments. Rationale If there is no need for a proxy server, it is recommended that the squid proxy be deleted to reduce the potential attack surface. text/html 2017-05-04T16:50:32+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/14?rev=1493909432&do=diff 2.2.14 Ensure SNMP Server is not enabled (Scored) Profile Applicability Description The Simple Network Management Protocol (SNMP) server is used to listen for SNMP commands from an SNMP management system, execute the commands or collect the information and then send results back to the requesting system. text/html 2017-05-04T16:50:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/15?rev=1493909456&do=diff 2.2.15 Ensure mail transfer agent is configured for local-only mode (Scored) Profile Applicability Description Mail Transfer Agents (MTA), such as sendmail and Postfix, are used to listen for incoming mail and transfer the messages to the appropriate user or mail server. If the system is not intended to be a mail server, it is recommended that the MTA be configured to only process local mail. text/html 2017-05-04T16:51:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/16?rev=1493909514&do=diff 2.2.16 Ensure NIS Server is not enabled (Scored) Profile Applicability Description The Network Information Service (NIS) (formally known as Yellow Pages) is a client-server directory service protocol for distributing system configuration files. The NIS server is a collection of programs that allow for the distribution of configuration files. text/html 2017-05-04T16:55:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/17?rev=1493909746&do=diff 2.2.17 Ensure rsh server is not enabled (Scored) Profile Applicability Description The Berkeley rsh-server (rsh, rlogin, rexec) package contains legacy services that exchange credentials in clear-text. Rationale These legacy services contain numerous security exposures and have been replaced with the more secure SSH package. text/html 2017-05-04T16:57:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/18?rev=1493909860&do=diff 2.2.18 Ensure telnet server is not enabled (Scored) Profile Applicability Description The telnet-server package contains the telnet daemon, which accepts connections from users from other systems via the telnet protocol. Rationale The telnet protocol is insecure and unencrypted. The use of an unencrypted transmission medium could allow a user with access to sniff network traffic the ability to steal credentials. The text/html 2017-05-04T16:58:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/19?rev=1493909928&do=diff 2.2.19 Ensure tftp server is not enabled (Scored) Profile Applicability Description Trivial File Transfer Protocol (TFTP) is a simple file transfer protocol, typically used to automatically transfer configuration or boot machines from a boot server. The packages text/html 2017-05-04T16:53:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/20?rev=1493909588&do=diff 2.2.20 Ensure rsync service is not enabled (Scored) Profile Applicability Description The rsyncd service can be used to synchronize files between systems over network links. Rationale The rsyncd service presents a security risk as it uses unencrypted protocols for communication. text/html 2017-05-04T16:59:44+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/2/2/21?rev=1493909984&do=diff 2.2.21 Ensure talk server is not enabled (Scored) Profile Applicability Description The talk software makes it possible for users to send and receive messages across systems through a terminal session. The talk client (allows initiate of talk sessions) is installed by default.