← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215258

CAT I (High)

AIX telnet daemon must not be running.

Rule ID

SV-215258r987796_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-000197

Discussion

This telnet service is used to service remote user connections. This is historically the most commonly used remote access method for UNIX servers. The username and passwords are passed over the network in clear text and therefore insecurely. Unless required the telnetd daemon will be disabled. This function, if required, should be facilitated through SSH.

Check Content

Determine if the "telnet" daemon is running by running the following command:
# grep -v '^#' /etc/inetd.conf | grep telnet 

If an entry is returned, this is a finding.

Fix Text

Disable the "telnet" entry in "/etc/inetd.conf" using command: 
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'telnet' -p 'tcp6' 

Reload the inetd process:
# refresh -s inetd