← Back to VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

V-240443

CAT II (Medium)

The SMTP service HELP command must not be enabled.

Rule ID

SV-240443r671070_rule

STIG

VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-000382

Discussion

The HELP command should be disabled to mask version information. The version of the SMTP service software could be used by attackers to target vulnerabilities present in specific software versions.

Check Content

Check the permissions of the sendmail helpfile:

ls -al /usr/lib/sendmail.d/helpfile

If the permissions are not "0000", this is a finding.

Fix Text

Run the following command to disable the sendmail helpfile:

# chmod 0000 /usr/lib/sendmail.d/helpfile