UCF STIG Viewer Logo

The system must not have the UUCP service active.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4696 GEN005280 SV-28427r1_rule ECSC-1 Medium
Description
The UUCP utility is designed to assist in transferring files, executing remote commands, and sending e-mail between UNIX systems over phone lines and direct connections between systems. The UUCP utility is a primitive and arcane system with many security issues. There are alternate data transfer utilities/products that can be configured to more securely transfer data by providing for authentication as well as encryption.
STIG Date
Draft AIX Security Technical Implementation Guide 2011-08-17

Details

Check Text ( C-28692r1_chk )
# grep uucp /etc/inetd.conf
If uucp is found enabled, this is a finding.
Fix Text (F-25720r1_fix)
Edit /etc/inetd.conf and comment out the uucp service. Restart the inetd service.