← Back to VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

V-240428

CAT II (Medium)

Xinetd logging/tracing must be enabled.

Rule ID

SV-240428r671025_rule

STIG

VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000382

Discussion

Xinetd logging and tracing allows the system administrators to observe the IP addresses that are connecting to their machines and to observe what network services are being sought. This provides valuable information when trying to find the source of malicious users and potential malicious users.

Check Content

Examine the /etc/xinetd.conf file and each file in the /etc/xinetd.d directory file for the following:

log_type = SYSLOG authpriv
log_on_success = HOST PID USERID EXIT
log_on_failure = HOST USERID

If "xinetd" running and logging is not enabled, this is a finding.

Fix Text

Edit each file in the /etc/xinetd.d directory and the /etc/xinetd.conf file to contain:

log_type = SYSLOG authpriv
log_on_success = HOST PID USERID EXIT
log_on_failure = HOST USERID

The /etc/xinetd.conf file contains default values that will hold true for all services unless individually modified in the service's "xinetd.d" file.