Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must not run an Internet Network News (INN) server.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1023 | GEN006240 | SV-63965r1_rule | ECSC-1 | Medium |
| Description |
|---|
| INN servers access Usenet newsfeeds and store newsgroup articles. INN servers use the Network News Transfer Protocol (NNTP) to transfer information from the Usenet to the server and from the server to authorized remote hosts. If this function is necessary to support a valid mission requirement, its use must be authorized and approved in the system accreditation package. |
| STIG | Date |
|---|---|
| Oracle Linux 5 Security Technical Implementation Guide | 2015-03-26 |
Details
| Check Text ( C-52453r1_chk ) |
|---|
| # ps -ef | egrep "innd|nntpd" If an Internet Network News server is running, this is a finding. |
| Fix Text (F-54537r1_fix) |
|---|
| Disable the INN server. |