Check: GEN003800
HP-UX 11.31 STIG:
GEN003800
(in versions v1 r19 through v1 r13)
Title
Inetd or xinetd logging/tracing must be enabled. (Cat III impact)
Discussion
Inetd or xinetd logging and tracing allows the system administrators to observe the IP addresses connecting to their machines and to observe what network services are being sought. This provides valuable information when trying to find the source of malicious users and potential malicious users.
Check Content
# ps -ef | grep -v grep | egrep -i "inetd|xinetd" If the -l logging parameter is not used, this is a finding. If the (x)inetd process is not running, this is not a finding.
Fix Text
Edit the (x)inetd startup script to include the -l parameter for the internet daemon process.
Additional Identifiers
Rule ID: SV-35085r1_rule
Vulnerability ID: V-1011
Group Title: GEN003800
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000134 |
The information system generates audit records containing information that establishes the outcome of the event. |
Controls
Number | Title |
---|---|
AU-3 |
Content Of Audit Records |