Disable rpcbind.service and rpcbind.socket in presets
Issue
- On RHEL 9 and RHEL 10 systems, the rpcbind service is enabled and starts automatically after reboot due to the systemd preset provided by the RPM package.
- This occurs even when rpcbind is not required, including systems that use only NFSv4 mounts.
- This behavior conflicts with security hardening guidelines, which recommend not running unnecessary RPC services.
- There is no need to activate RPCbind through a preset.
# systemctl list-unit-files rpcbind.*
UNIT FILE STATE PRESET
rpcbind.service enabled enabled
rpcbind.socket enabled enabled
rpcbind.target static
Environment
- Red Hat Enterprise Linux 10.0
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.