Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-12005 | GEN003700 | SV-45756r1_rule | Medium |
Description |
---|
Unnecessary services should be disabled to decrease the attack surface of the system. |
STIG | Date |
---|---|
SUSE Linux Enterprise Server v11 for System z | 2017-08-25 |
Check Text ( C-43109r1_chk ) |
---|
# ps -ef |grep xinetd If xinetd is not running, this check is not a finding. # grep -v "^#" /etc/xinetd.conf # grep disable /etc/xinetd.d/* |grep no If no active services are found, and the inetd daemon is running, this is a finding. |
Fix Text (F-39155r1_fix) |
---|
# rcxinetd stop; insserv -r xinetd OR # service xinetd stop ; chkconfig xinetd off |