UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The telnet service must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-51687 OSX8-00-00605 SV-65897r1_rule High
Description
Passwords need to be protected at all times and encryption is the standard method for protecting passwords during transmission to ensure unauthorized users/processes do not gain access to them.
STIG Date
Apple OS X 10.8 (Mountain Lion) Workstation STIG 2015-02-10

Details

Check Text ( C-53989r2_chk )
The service "telnet" should be disabled, to check the status of the service, run the following command:

sudo /usr/libexec/PlistBuddy -c "print com.apple.telnetd:Disabled" /var/db/launchd.db/com.apple.launchd/overrides.plist

If the returned value isn't "true" or doesn't exist, this is a finding.
Fix Text (F-56485r1_fix)
To set the telnet service to disabled, run the following command:

sudo defaults write /private/var/db/launchd.db/com.apple.launchd/overrides.plist "com.apple.telnetd" -dict Disabled -bool true