Oracle Solaris
TMA-SOLARIS-8.5
Check that the Banner Setting for telnet is Null
Description
The BANNER variable in the file /etc/default/telnetd can be used to display text before the telnet login prompt. Traditionally, it has been used to display the OS level of the target system. The warning banner provides information that can be used in reconnaissance for an attack. By default, this file is distributed with the BANNER variable set to null. Audit: pattern match on /etc/default/telnetd as described in the CIS audit procedure.
How it is checked
Audit method: File pattern
- File
/etc/default/telnetd- Pattern
(?m)^BANNER=\s*$
How it is fixed
Fix method: Guidance or infrastructure patch
Perform the following to implement the recommended state: # cd /etc/default # awk '/^BANNER=/ { $1 = "BANNER=" }; { print }' telnetd > telnetd.CIS # mv telnetd.CIS telnetd
Properties
- Operating systems
- Any
- Tags
- solarisnetwork
- Reference
- CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 8.5 Check that the Banner Setting for telnet is Null
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target solaris