Navigate

Check: GEN005280

SUSE Linux Enterprise Server v11 for System z STIG: GEN005280 (in versions v1 r12 through v1 r9)

Title

The system must not have the UUCP service active. (Cat II impact)

Discussion

The UUCP utility is designed to assist in transferring files, executing remote commands, and sending e-mail between UNIX systems over phone lines and direct connections between systems. The UUCP utility is a primitive and arcane system with many security issues. There are alternate data transfer utilities/products that can be configured to more securely transfer data by providing for authentication as well as encryption.

Check Content

# chkconfig uucp or: # chkconfig --list | grep uucp If UUCP is found enabled, this is a finding.

Fix Text

# chkconfig uucp off # service uucp stop # service xinetd restart

Additional Identifiers

Rule ID: SV-45938r1_rule

Vulnerability ID: V-4696

Group Title: GEN005280

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-001436	The organization disables organization-defined networking protocols within the information system deemed to be nonsecure except for explicitly identified components in support of specific operational requirements.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
No controls are assigned to this check