Title

Inetd or xinetd logging/tracing must be enabled. (Cat III impact)

Discussion

Inetd or xinetd logging and tracing allows the system administrators to observe the IP addresses connecting to their machines and to observe what network services are being sought. This provides valuable information when trying to find the source of malicious users and potential malicious users.

Check Content

# ps -ef |grep inetd |grep "-t" If no results are returned, this is a finding.

Fix Text

Edit the inetd startup script and add the -t parameter.

Additional Identifiers

Rule ID: SV-27429r1_rule

Vulnerability ID: V-1011

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.