{"description": "Most organizations have an operational need to run at\nleast one nameserver. However, there are many common attacks\ninvolving DNS server software, and this server software should\nbe disabled on any system\non which it is not needed.", "warnings": [], "requires": [], "conflicts": [], "values": {}, "groups": ["disabling_dns_server", "dns_server_isolation", "dns_server_protection"], "rules": ["package_dnsmasq_removed", "package_unbound_removed", "service_dnsmasq_disabled"], "platform": "", "platforms": [], "inherited_platforms": [], "cpe_platform_names": [], "title": "DNS Server", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/dns/group.yml"}