Disable rpcbind.service and rpcbind.socket in presets

Solution Verified - Updated -

Issue

  • On RHEL 9 and RHEL 10 systems, the rpcbind service is enabled and starts automatically after reboot due to the systemd preset provided by the RPM package.
  • This occurs even when rpcbind is not required, including systems that use only NFSv4 mounts.
  • This behavior conflicts with security hardening guidelines, which recommend not running unnecessary RPC services.
  • There is no need to activate RPCbind through a preset.
# systemctl list-unit-files rpcbind.*
UNIT FILE       STATE   PRESET
rpcbind.service enabled enabled
rpcbind.socket  enabled enabled
rpcbind.target  static  

Environment

  • Red Hat Enterprise Linux 10.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content