Check: GEN005280 M6
MACOSX 10.6:
GEN005280 M6
(in version v1 r3)
Title
The system must not have the UUCP service active. (Cat II impact)
Discussion
The UUCP utility is designed to assist in transferring files, executing remote commands, and sending email between UNIX systems over phone lines and direct connections between systems. The UUCP utility is a primitive and arcane system with many security issues. There are alternate data transfer utilities/products that can be configured to more securely transfer data by providing for authentication, as well as encryption.
Check Content
Open a terminal session and enter the following command to verify uucp is disabled. defaults read /System/Library/LaunchDaemons/com.apple.uucp Disabled If a 1 is not returned, this is a finding.
Fix Text
Open a terminal session and use the following command to disable uucp. launchctl unload -w /System/Library/LaunchDaemons/com.apple.uucp.plist NOTE: This command is being run to adjust the overrides file; unloading errors are normal, repeat the check to verify.
Additional Identifiers
Rule ID: SV-38055r1_rule
Vulnerability ID: V-4696
Group Title:
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001436 |
The organization disables organization-defined networking protocols within the information system deemed to be nonsecure except for explicitly identified components in support of specific operational requirements. |
Controls
| Number | Title |
|---|---|
| No controls are assigned to this check |