UCF STIG Viewer Logo

The operating system must employ strong identification and authentication techniques in the establishment of non-local maintenance and diagnostic sessions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-51511 OSX8-00-00695 SV-65721r1_rule Medium
Description
Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network, either an external network (e.g., the Internet) or an internal network. The act of managing systems includes the ability to access system configuration details, diagnostic information, user information, as well as installation of software.
STIG Date
Apple OS X 10.8 (Mountain Lion) Workstation STIG 2015-02-10

Details

Check Text ( C-53851r2_chk )
The service "telnet" should be disabled, to check the status of the service, run the following command:

sudo /usr/libexec/PlistBuddy -c "print com.apple.telnetd:Disabled" /var/db/launchd.db/com.apple.launchd/overrides.plist

If the returned value isn't "true" or doesn't exist, this is a finding.
Fix Text (F-56317r1_fix)
To set the "telnet" service to disabled, run the following command:

sudo defaults write /private/var/db/launchd.db/com.apple.launchd/overrides.plist "com.apple.telnetd" -dict Disabled -bool true