2.2.5 Ensure DHCP Server is not enabled (Scored)

Level 1 - Server
Level 1 - Workstation 

The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses.

Unless a system is specifically set up to act as a DHCP server, it is recommended that this service be deleted to reduce the potential attack surface.

Run the following commands to verify dhcpd is not enabled:

# systemctl is-enabled isc-dhcp-server 
# systemctl is-enabled isc-dhcp-server6 

Verify result is not “enabled”.

Run the following command to disable dhcpd:

# systemctl disable isc-dhcp-server 
# systemctl disable isc-dhcp-server6

More detailed documentation on DHCP is available at http://www.isc.org/software/dhcp.

  • ubuntu1604/2/2/5.txt
  • Last modified: 2017/05/02 11:24
  • by Piotr Kłoczewski