Superfluous NFS daemon

Risk Level: High risk vulnerability  High

Check or Attack Name: nfssuper

Platforms: NFS
Description:

The target machine is running an nfsd daemon, but is not exporting any file systems. You should verify the configuration of the target machine.

Remedy:

Disable the NFS daemon if it is not needed. Nfsd is most often started from an rc script, but may also be started from the \etc\inetd.conf file.

To disable the daemon from an rc script, comment it out as appropriate for your operating system. As an example for disabling nfsd under SunOS 5.5, execute the following commands:

# /etc/init.d/nfs.server stop

# mv /etc/init.d/nfs.server /etc/init.d/DISABLED_nfs.server

To disable the daemon from inetd.conf:

  1. Edit the /etc/inetd.conf (or equivalent) file.
  2. Locate the line that controls the daemon.
  3. Type a # at the beginning of the line to comment out the daemon.
  4. Restart inetd.
References:

X-Force Logo
Know Your Risks