← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-12005

CAT II (Medium)

Inetd and xinetd must be disabled or removed if no network services utilizing them are enabled.

Rule ID

SV-45756r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000305

Discussion

Unnecessary services should be disabled to decrease the attack surface of the system.

Check Content

# ps -ef |grep xinetd
If xinetd is not running, this check is not a finding.
# grep -v "^#" /etc/xinetd.conf
# grep disable /etc/xinetd.d/* |grep no
If no active services are found, and the inetd daemon is running, this is a finding.

Fix Text

# rcxinetd stop; insserv -r xinetd
     OR 

# service xinetd stop ; chkconfig xinetd off