The system must not run an Internet Network News (INN) server.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1023 | GEN006240 | SV-37899r1_rule | ECSC-1 | Medium |
| Description |
|---|
| INN servers access Usenet newsfeeds and store newsgroup articles. INN servers use the Network News Transfer Protocol (NNTP) to transfer information from the Usenet to the server and from the server to authorized remote hosts. If this function is necessary to support a valid mission requirement, its use must be authorized and approved in the system accreditation package. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2017-03-01 |
Details
| Check Text ( C-37125r1_chk ) |
|---|
| # ps -ef | egrep "innd|nntpd" If an Internet Network News server is running, this is a finding. |
| Fix Text (F-32393r1_fix) |
|---|
| Disable the INN server. |