Inetd and xinetd must be disabled or removed if no network services utilizing them are enabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-226906	GEN003700	SV-226906r603265_rule		Medium

Description
Unnecessary services should be disabled to decrease the attack surface of the system.

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-29068r485005_chk )
Determine if inetd is running, # svcs -a | grep inetd If inetd is not running, this check is not a finding. # inetadm | grep -v disabled If no enabled/online services are found, yet the inetd daemon is running, this is a finding.

Fix Text (F-29056r485006_fix)
Disable the inetd service. Procedure: # svcadm disable inetd