Install and enable the Avahi daemon service, as necessary.

Back

CONTROL ID
04977

CONTROL TYPE
Configuration

CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS

This Control directly supports the implied Control(s):

Disable all unnecessary services unless otherwise noted in a policy exception., CC ID: 00880

There are no implementation support Controls.

SELECTED AUTHORITY DOCUMENTS COMPLIED WITH

Ensure Avahi Server is not installed Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For example, a user ca… (2.2.3, CIS Amazon Linux 2 Benchmark, v.2.0.0, Level 1)
Ensure Avahi Server is not installed Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For example, a user ca… (2.2.3, CIS Amazon Linux 2 Benchmark, v.2.0.0, Level 2)
Title: Disable Avahi Server Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For example, a user can plug… (Rule: xccdf_org.cisecurity.benchmarks_rule_3.3_Disable_Avahi_Server Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_3.3.1_services.avahi-daemon, The Center for Internet Security CentOS 6 Level 1 Benchmark, 1.0.0)
Title: Disable Avahi Server Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For example, a user can plu… (Rule:xccdf_org.cisecurity.benchmarks_rule_3.3_Disable_Avahi_Server Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_3.3.1_services.avahi-daemon, The Center for Internet Security Red Hat Enterprise Linux 6 Level 1 Benchmark, 1.2.0)
Title: Disable Avahi Server Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For example, a user can plu… (Rule:xccdf_org.cisecurity.benchmarks_rule_3.3_Disable_Avahi_Server Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_3.3.1_services.avahi-daemon, The Center for Internet Security Red Hat Enterprise Linux 6 Level 2 Benchmark, 1.2.0)
Title: Ensure Avahi Server is not enabled Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For exampl… (Rule: xccdf_org.cisecurity.benchmarks_rule_6.2_Ensure_Avahi_Server_is_not_enabled Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_6.2.1_services.avahi-daemon, The Center for Internet Security Ubuntu 12.04 LTS Level 1 Benchmark, v1.0.0)
Title: Ensure Avahi Server is not enabled Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For exampl… (Rule: xccdf_org.cisecurity.benchmarks_rule_6.2_Ensure_Avahi_Server_is_not_enabled Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_6.2.1_services.avahi-daemon, The Center for Internet Security Ubuntu 12.04 LTS Level 2 Benchmark, v1.0.0)
Ensure Avahi Server is not enabled Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For example, a user can … (2.2.4, CIS Oracle Linux 8 Benchmark, Server Level 1, v1.0.1)
Ensure Avahi Server is not enabled Description: Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish and discover services and hosts running on a local network with no specific configuration. For example, a user can … (2.2.4, CIS Oracle Linux 8 Benchmark, Server Level 2, v1.0.1)
The avahi-daemon service should be enabled or disabled as appropriate. Technical Mechanisms: via chkconfig Parameters: enabled / disabled References: Section: 3.7.1.1, Value: disabled CCE-U-203 (CCE-4365-3, Common Configuration Enumeration List, Combined XML: Red Hat Enterprise Linux 5, 5.20130214)