Title

Inetd or xinetd logging/tracing must be enabled. (Cat III impact)

Discussion

Inetd or xinetd logging and tracing allows the system administrators to observe the IP addresses connecting to their machines and to observe what network services are being sought. This provides valuable information when trying to find the source of malicious users and potential malicious users.

Check Content

# ps -ef | grep -v grep | egrep -i "inetd|xinetd" If the -l logging parameter is not used, this is a finding. If the (x)inetd process is not running, this is not a finding.

Fix Text

Edit the (x)inetd startup script to include the -l parameter for the internet daemon process.

Additional Identifiers

Rule ID: SV-35085r1_rule

Vulnerability ID: V-1011

Group Title: GEN003800

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.