Ensure telnet client is not installed

MediumLevel 1Automatedlinux

Description

The telnet package contains the telnet client, which allows users to start connections to other systems via the telnet protocol.

How it is checked

Audit method: Shell command

shell

alt0() { command -v rpm >/dev/null 2>&1 || { echo "step1: rpm not installed"; return 1; }; o=$(bash -c 'rpm -q telnet' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'package telnet is not installed' || { echo step1: missing 'package telnet is not installed'; return 1; }; }; if alt0; then echo compliant; fi

Expected output: compliant

How it is fixed

Fix method: Guidance or infrastructure patch

Run the following command to remove the telnet package: # dnf remove telnet

Properties

Operating systems: alinux-3
Tags: cis-convertedlinux
Reference: CIS Alibaba Cloud Linux 3 Benchmark v2.0.0 - 2.2.4

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target linux