The system must not have the UUCP service active.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-4696	GEN005280	SV-35171r1_rule	ECSC-1	Medium

Description

The UUCP utility is designed to assist in transferring files, executing remote commands, and sending e-mail between UNIX systems over phone lines and direct connections between systems. The UUCP utility is a primitive and arcane system with many security issues. There are alternate data transfer utilities/products that can be configured to more securely transfer data by providing for authentication as well as encryption.

STIG	Date
HP-UX 11.23 Security Technical Implementation Guide	2015-12-02

Details

Check Text ( C-36605r1_chk )
# cat /etc/inetd.conf | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | grep -v "^#" | grep -i uucp If uucp is found enabled, this is a finding.

Fix Text (F-31973r1_fix)
Edit /etc/inetd.conf and comment the uucp service entry. Restart the inetd service. # inetd -c