<def-group>
  <!-- THIS FILE IS GENERATED by create_services_disabled.py.  DO NOT EDIT.  -->
  <definition class="compliance" id="service_rpc_disabled"
  version="1">
    <metadata>
      <title>Services portmap and rpcbind Disabled</title>
      <affected family="unix">
        <platform>CentOS 4</platform>
		<platform>CentOS 5</platform>
		<platform>Red Hat Enterprise Linux 4</platform>
		<platform>Red Hat Enterprise Linux 5</platform>
      </affected>
      <description>The portmap and rpcbind services should be disabled if possible.</description>
    </metadata>
    <criteria comment="packages portmap and rpcbind removed or disabled" operator="OR">
		<extend_definition comment="rpm package portmap and rpcbind removed" definition_ref="package_rpc_removed" />
		<criteria operator="AND" comment="services portmap and rpcbind are not configured to start">
		  <criterion comment="portmap runlevel 0" test_ref="test_runlevel0_portmap" />
		  <criterion comment="portmap runlevel 1" test_ref="test_runlevel1_portmap" />
		  <criterion comment="portmap runlevel 2" test_ref="test_runlevel2_portmap" />
		  <criterion comment="portmap runlevel 3" test_ref="test_runlevel3_portmap" />
		  <criterion comment="portmap runlevel 4" test_ref="test_runlevel4_portmap" />
		  <criterion comment="portmap runlevel 5" test_ref="test_runlevel5_portmap" />
		  <criterion comment="portmap runlevel 6" test_ref="test_runlevel6_portmap" />
		  <criterion comment="rpcbind runlevel 0" test_ref="test_runlevel0_rpcbind" />
		  <criterion comment="rpcbind runlevel 1" test_ref="test_runlevel1_rpcbind" />
		  <criterion comment="rpcbind runlevel 2" test_ref="test_runlevel2_rpcbind" />
		  <criterion comment="rpcbind runlevel 3" test_ref="test_runlevel3_rpcbind" />
		  <criterion comment="rpcbind runlevel 4" test_ref="test_runlevel4_rpcbind" />
		  <criterion comment="rpcbind runlevel 5" test_ref="test_runlevel5_rpcbind" />
		  <criterion comment="rpcbind runlevel 6" test_ref="test_runlevel6_rpcbind" />
		</criteria>
	</criteria>
  </definition>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel0_portmap"
  version="2">
    <unix:object object_ref="obj_runlevel0_portmap" />
    <unix:state state_ref="state_service_portmap_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel1_portmap"
  version="2">
    <unix:object object_ref="obj_runlevel1_portmap" />
    <unix:state state_ref="state_service_portmap_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel2_portmap"
  version="2">
    <unix:object object_ref="obj_runlevel2_portmap" />
    <unix:state state_ref="state_service_portmap_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel3_portmap"
  version="2">
    <unix:object object_ref="obj_runlevel3_portmap" />
    <unix:state state_ref="state_service_portmap_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel4_portmap"
  version="2">
    <unix:object object_ref="obj_runlevel4_portmap" />
    <unix:state state_ref="state_service_portmap_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel5_portmap"
  version="2">
    <unix:object object_ref="obj_runlevel5_portmap" />
    <unix:state state_ref="state_service_portmap_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel6_portmap"
  version="2">
    <unix:object object_ref="obj_runlevel6_portmap" />
    <unix:state state_ref="state_service_portmap_off" />
  </unix:runlevel_test>
  <unix:runlevel_object id="obj_runlevel0_portmap" version="1">
    <unix:service_name>portmap</unix:service_name>
    <unix:runlevel operation="equals">0</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel1_portmap" version="1">
    <unix:service_name>portmap</unix:service_name>
    <unix:runlevel operation="equals">1</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel2_portmap" version="1">
    <unix:service_name>portmap</unix:service_name>
    <unix:runlevel operation="equals">2</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel3_portmap" version="1">
    <unix:service_name>portmap</unix:service_name>
    <unix:runlevel operation="equals">3</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel4_portmap" version="1">
    <unix:service_name>portmap</unix:service_name>
    <unix:runlevel operation="equals">4</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel5_portmap" version="1">
    <unix:service_name>portmap</unix:service_name>
    <unix:runlevel operation="equals">5</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel6_portmap" version="1">
    <unix:service_name>portmap</unix:service_name>
    <unix:runlevel operation="equals">6</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_state comment="not configured to start" id="state_service_portmap_off" version="1">
    <unix:start datatype="boolean">false</unix:start>
    <unix:kill datatype="boolean">true</unix:kill>
  </unix:runlevel_state>

  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel0_rpcbind"
  version="2">
    <unix:object object_ref="obj_runlevel0_rpcbind" />
    <unix:state state_ref="state_service_rpcbind_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel1_rpcbind"
  version="2">
    <unix:object object_ref="obj_runlevel1_rpcbind" />
    <unix:state state_ref="state_service_rpcbind_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel2_rpcbind"
  version="2">
    <unix:object object_ref="obj_runlevel2_rpcbind" />
    <unix:state state_ref="state_service_rpcbind_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel3_rpcbind"
  version="2">
    <unix:object object_ref="obj_runlevel3_rpcbind" />
    <unix:state state_ref="state_service_rpcbind_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel4_rpcbind"
  version="2">
    <unix:object object_ref="obj_runlevel4_rpcbind" />
    <unix:state state_ref="state_service_rpcbind_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel5_rpcbind"
  version="2">
    <unix:object object_ref="obj_runlevel5_rpcbind" />
    <unix:state state_ref="state_service_rpcbind_off" />
  </unix:runlevel_test>
  <unix:runlevel_test check="all" check_existence="any_exist"
  comment="Runlevel test" id="test_runlevel6_rpcbind"
  version="2">
    <unix:object object_ref="obj_runlevel6_rpcbind" />
    <unix:state state_ref="state_service_rpcbind_off" />
  </unix:runlevel_test>
  <unix:runlevel_object id="obj_runlevel0_rpcbind" version="1">
    <unix:service_name>rpcbind</unix:service_name>
    <unix:runlevel operation="equals">0</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel1_rpcbind" version="1">
    <unix:service_name>rpcbind</unix:service_name>
    <unix:runlevel operation="equals">1</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel2_rpcbind" version="1">
    <unix:service_name>rpcbind</unix:service_name>
    <unix:runlevel operation="equals">2</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel3_rpcbind" version="1">
    <unix:service_name>rpcbind</unix:service_name>
    <unix:runlevel operation="equals">3</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel4_rpcbind" version="1">
    <unix:service_name>rpcbind</unix:service_name>
    <unix:runlevel operation="equals">4</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel5_rpcbind" version="1">
    <unix:service_name>rpcbind</unix:service_name>
    <unix:runlevel operation="equals">5</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_object id="obj_runlevel6_rpcbind" version="1">
    <unix:service_name>rpcbind</unix:service_name>
    <unix:runlevel operation="equals">6</unix:runlevel>
  </unix:runlevel_object>
  <unix:runlevel_state comment="not configured to start" id="state_service_rpcbind_off" version="1">
    <unix:start datatype="boolean">false</unix:start>
    <unix:kill datatype="boolean">true</unix:kill>
  </unix:runlevel_state>
</def-group>
