Back

Enable or disable the mcstrans service, as appropriate.


CONTROL ID
05541
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Disable all unnecessary services unless otherwise noted in a policy exception., CC ID: 00880

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • Ensure the MCS Translation Service (mcstrans) is not installed Description: The `mcstransd` daemon provides category label information to client processes requesting information. The label translations are defined in `/etc/selinux/targeted/setrans.conf Rationale: Since this service is not used very … (1.6.1.8, CIS Amazon Linux 2 Benchmark, v.2.0.0, Level 1)
  • Ensure the MCS Translation Service (mcstrans) is not installed Description: The `mcstransd` daemon provides category label information to client processes requesting information. The label translations are defined in `/etc/selinux/targeted/setrans.conf Rationale: Since this service is not used very … (1.6.1.8, CIS Amazon Linux 2 Benchmark, v.2.0.0, Level 2)
  • Title: Remove MCS Translation Service (mcstrans) Description: The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf Rationale: Since this service is not used very often, disabl… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.4.5_Remove_MCS_Translation_Service_mcstrans Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.4.5.1_services.mcstrans, The Center for Internet Security CentOS 6 Level 2 Benchmark, 1.0.0)
  • Title: Remove MCS Translation Service (mcstrans) Description: The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf Rationale: Since this service is not used very often, disa… (Rule:xccdf_org.cisecurity.benchmarks_rule_1.4.5_Remove_MCS_Translation_Service_mcstrans Artifact Expression:xccdf_org.cisecurity.benchmarks_ae_1.4.5.1_services.mcstrans, The Center for Internet Security Red Hat Enterprise Linux 6 Level 2 Benchmark, 1.2.0)
  • Ensure the MCS Translation Service (mcstrans) is not installed Description: The `mcstransd` daemon provides category label information to client processes requesting information. The label translations are defined in `/etc/selinux/targeted/setrans.conf` Rationale: Since this service is not used very… (1.7.1.7, CIS Oracle Linux 8 Benchmark, Server Level 2, v1.0.1)
  • The mcstrans service should be enabled or disabled as appropriate. Technical Mechanisms: via chkconfig Parameters: enabled / disabled References: Section: 2.4.3.2, Value: disabled CCE-U-203 (CCE-3668-1, Common Configuration Enumeration List, Combined XML: Red Hat Enterprise Linux 5, 5.20130214)