documentation_complete: true


title: 'Disable ypserv Service'

description: |-
    The <tt>ypserv</tt> service, which allows the system to act as a client in
    a NIS or NIS+ domain, should be disabled.
    {{{ describe_service_disable(service="ypserv") }}}

rationale: |-
    Disabling the <tt>ypserv</tt> service ensures the system is not acting
    as a client in a NIS or NIS+ domain. This service should be disabled
    unless in use.

severity: medium

identifiers:
    cce@rhel8: CCE-86121-1
    cce@rhel9: CCE-86122-9


ocil_clause: |-
    {{{ ocil_clause_service_disabled(service="ypserv") }}}

ocil: |-
    {{{ ocil_service_disabled(service="ypserv") }}}

platform: system_with_kernel

template:
    name: service_disabled
    vars:
        servicename: ypserv
