Disable Telnet Service

ВисокаНиво 1Аутоматскаsolaris

Опис

The telnet daemon, which accepts connections from users from other systems via the telnet protocol and can be used for remote shell access. The telnet protocol is insecure and unencrypted. The use of an unencrypted transmission medium could allow a user with access to sniff network traffic the ability to steal credentials. The ssh protocol provides an encrypted session and stronger security. Audit: `svcs -Ho state` must report disabled; a service that is not installed is compliant.

Како се проверава

Метод провере: Команда љуске

shell

command -v svcs >/dev/null 2>&1 || exit 1; r=compliant; for f in svc:/network/telnet; do st=$(svcs -Ho state "$f" 2>/dev/null); case "$st" in ''|disabled) ;; *) r="$f: $st";; esac; done; echo "$r"

Очекивани излаз: compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

svcadm disable svc:/network/telnet

Својства

Оперативни системи: Било који
Ознаке: solarisnetwork
Референца: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 2.12 Disable Telnet Service

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target solaris