UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Inetd and xinetd must be disabled or removed if no network services utilizing them are enabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-12005 GEN003700 SV-45756r1_rule ECSC-1 Medium
Description
Unnecessary services should be disabled to decrease the attack surface of the system.
STIG Date
SUSE Linux Enterprise Server v11 for System z 2015-01-26

Details

Check Text ( C-43109r1_chk )
# ps -ef |grep xinetd
If xinetd is not running, this check is not a finding.
# grep -v "^#" /etc/xinetd.conf
# grep disable /etc/xinetd.d/* |grep no
If no active services are found, and the inetd daemon is running, this is a finding.
Fix Text (F-39155r1_fix)
# rcxinetd stop; insserv -r xinetd
OR

# service xinetd stop ; chkconfig xinetd off