Title

Inetd or xinetd logging/tracing must be enabled. (Cat III impact)

Discussion

Inetd or xinetd logging and tracing allows the system administrators to observe the IP addresses that are connecting to their machines and to observe what network services are being sought. This provides valuable information when trying to find the source of malicious users and potential malicious users.

Check Content

Determine if inetd or xinetd has logging or tracing enabled. # ps -ef |grep inetd |grep -e "-d" If no results are returned, this is a finding.

Fix Text

Edit the inetd startup script to contain the "-d" parameter for the inetd process. #vi /etc/rc.tcpip # chssys -s inetd -a '-d'

Additional Identifiers

Rule ID: SV-38951r1_rule

Vulnerability ID: V-1011

Group Title: GEN003800

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.