{"description": "The <tt>nails</tt> service is used to run McAfee VirusScan Enterprise\nfor Linux and McAfee Host-based Security System (HBSS) services.\n\nThe <code>nails</code> service can be enabled with the following command:\n<pre>$ sudo systemctl enable nails.service</pre>", "rationale": "Virus scanning software can be used to detect if a system has been compromised by\ncomputer viruses, as well as to limit their spread to other systems.", "severity": "medium", "references": {"cis-csc": ["12", "13", "14", "4", "7", "8"], "cobit5": ["APO01.06", "APO13.02", "BAI02.01", "BAI06.01", "DSS04.07", "DSS05.01", "DSS05.02", "DSS05.03", "DSS06.06"], "isa-62443-2009": ["4.3.4.3.8", "4.4.3.2"], "isa-62443-2013": ["SR 3.2", "SR 3.3", "SR 3.4", "SR 4.1"], "iso27001-2013": ["A.12.2.1", "A.14.2.8", "A.8.2.3"], "nist": ["CM-6(a)", "SC-28", "SI-3(a)"], "nist-csf": ["DE.CM-4", "DE.DP-3", "PR.DS-1"], "srg": ["SRG-OS-000480-GPOS-00227"]}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": null, "ocil": "\n\nRun the following command to determine the current status of the\n<code>nails</code> service:\n<pre>$ sudo systemctl is-active nails</pre>\nIf the service is running, it should return the following: <pre>active</pre>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": "system_with_kernel", "platforms": ["system_with_kernel"], "sce_metadata": {"check-import": "stdout", "platform": ["multi_platform_all"], "environment": "any", "filename": "service_nails_enabled.sh", "relative_path": "ubuntu2204/checks/sce/service_nails_enabled.sh"}, "inherited_platforms": [], "cpe_platform_names": ["system_with_kernel"], "inherited_cpe_platform_names": [], "bash_conditional": null, "fixes": {}, "title": "Enable nails Service", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/software/integrity/endpoint_security_software/mcafee_security_software/service_nails_enabled/rule.yml", "template": {"name": "service_enabled", "vars": {"servicename": "nails"}, "backends": {}}}