topic Re: disbale email server cis security in Operating System - HP-UX

disbale email server cis security

Vincent_5 — Thu, 22 Feb 2018 15:05:02 GMT

Hi Guys,

Can someone help i'm trying to harden my server to disable the email server from cis security script below

ch_rc -a -p SENDMAIL_SERVER=0 /etc/rc.config.d/mailservs cd /var/spool/cron/crontabscrontab -l >root.tmpecho '0 * * * * /usr/lib/sendmail -q' >>root.tmpcrontab root.tmprm -f root.tmp

but after running the script, the parameter still fail. Please help

Regards

VIncent

Re: disbale email server cis security

Patrick Wallek — Thu, 22 Feb 2018 21:32:03 GMT

To turn off sendmail run:

# /sbin/init.d/sendmail stop

Now go to the /etc/rc.config.d directory and manually edit the 'mailservs' file.

# cd /etc/rc.config.d

# vi mailservs

Change the line that has:

SENDMAIL_SERVER=1

SENDMAIL_SERVER=0

Now save the file and exit.

Your server can not receive mail now.

Re: disbale email server cis security

Vincent_5 — Sat, 24 Feb 2018 03:05:48 GMT

Hi,
Thanks for the support, I hv already disable the mailservs and set to 0. But the cis assessment still fail. Kindly help

Regards
Vincent

Re: disbale email server cis security

Vincent_5 — Sat, 24 Feb 2018 03:07:27 GMT

Hi,
Btw, can anyone advice what is the cis script trying to check which I don't understand . Pls revert thanks

Regards
Vincent

Re: disbale email server cis security

Patrick Wallek — Sat, 24 Feb 2018 03:48:46 GMT

Is the sendmail daemon still running?

# ps -ef | grep sendmail

If it is, then you may just need to stop the daemon.

I've not seen the CIS script to know what it's checking. You've got it. Go through it and see what it's looking for, if it is actually a script and not a program.