build_shorthand.py from SCAP Security Guide ssg: 0.1.65 2.0 2022-10-04T12:06:51 service_cockpit_disabled_action PASS FAIL To check that the cockpit service is disabled in system boot configuration, run the following command: $ sudo systemctl is-enabled cockpit Output should indicate the cockpit service has either not been installed, or has been disabled at all runlevels, as shown in the example below: $ sudo systemctl is-enabled cockpit disabled Run the following command to verify cockpit is not active (i.e. not running) through current runtime configuration: $ sudo systemctl is-active cockpit If the service is not running the command will return the following output: inactive The service will also be masked, to check that the cockpit is masked, run the following command: $ sudo systemctl show cockpit | grep "LoadState\|UnitFileState" If the service is masked the command will return the following outputs: LoadState=masked UnitFileState=masked Is it the case that the "cockpit" is loaded and not masked?