UCF STIG Viewer Logo

The system must not have the finger service active.


Overview

Finding ID Version Rule ID IA Controls Severity
V-226922 GEN003860 SV-226922r603265_rule Low
Description
The finger service provides information about the system's users to network clients. This information could expose information that could be used in subsequent attacks.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-29084r485062_chk )
If the "SUNWrcmds" package, containing the finger service executable, is not installed, this is not applicable.

# svcs finger
If the finger service is not disabled, this is a finding.
Fix Text (F-29072r485063_fix)
Disable the finger service and restart inetd.
Procedure:
# svcadm disable finger
# svcadm refresh inetd