UCF STIG Viewer Logo

The system must not run an Internet Network News (INN) server.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1023 GEN006240 SV-38236r1_rule ECSC-1 Medium
Description
INN servers access Usenet newsfeeds and store newsgroup articles. INN servers use the Network News Transfer Protocol (NNTP) to transfer information from the Usenet to the server and from the server to authorized remote hosts. If this function is necessary to support a valid mission requirement, its use must be authorized and approved in the system accreditation package.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-09-14

Details

Check Text ( C-36722r2_chk )
Check the domain name for NIS maps.

Procedure:
# domainname

If the name returned is simple to guess, such as the organization name, building, or room name, etc., this is a finding.
Fix Text (F-32085r1_fix)
Disable the INN server.