{"description": "If NFS is not needed, disable the NFS client daemons nfslock, rpcgssd, and rpcidmapd.\n<br /><br />\nAll of these daemons run with elevated privileges, and many listen for network\nconnections. If they are not needed, they should be disabled to improve system\nsecurity posture.", "warnings": [], "requires": [], "conflicts": [], "values": {}, "groups": {}, "rules": ["package_rpcbind_removed", "service_nfslock_disabled", "service_rpcbind_disabled", "service_rpcgssd_disabled", "service_rpcidmapd_disabled"], "platform": "", "platforms": [], "inherited_platforms": ["system_with_kernel"], "cpe_platform_names": [], "title": "Disable Services Used Only by NFS", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/nfs_and_rpc/disabling_nfs/disabling_nfs_services/group.yml"}