Ensure chargen services are not enabled

MediumLevel 1Automatedlinux

Description

chargen is a network service that responds with 0 to 512 ASCII characters for each connection it receives. This service is intended for debugging and testing purposes. It is recommended that this service be disabled.

How it is checked

Audit method: Shell command

shell

alt0() { command -v chkconfig >/dev/null 2>&1 || { echo "step1: chkconfig not installed"; return 1; }; o=$(bash -c 'chkconfig --list' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'xinetd based services:' || { echo step1: missing 'xinetd based services:'; return 1; }; printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'chargen: off' || { echo step1: missing 'chargen: off'; return 1; }; printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'chargen-udp: off' || { echo step1: missing 'chargen-udp: off'; return 1; }; }; if alt0; then echo compliant; fi

Expected output: compliant

How it is fixed

Fix method: Guidance or infrastructure patch

Run the following commands to disable chargen and chargen-udp : # chkconfig chargen off # chkconfig chargen-udp off

Properties

Operating systems: sles-11
Tags: cis-convertedlinux
Reference: CIS SUSE Linux Enterprise 11 Benchmark v2.1.1 - 2.1.1

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target linux