The xinetd.d directory must have mode 0755 or less permissive.

From HP-UX 11.31 Security Technical Implementation Guide

Associated with IA controls: ECLP-1

Associated with: CCI-000225

SV-35074r1_rule The xinetd.d directory must have mode 0755 or less permissive.

Vulnerability discussion

The Internet service daemon configuration files must be protected as malicious modification could cause Denial of Service or increase the attack surface of the system.

Check content

Check the (x)inetd.conf file for any included directories. # find / -type f -name xinetd.conf | xargs -n1 ls -lL # cat /xinetd.conf | grep -v "^#" | grep includedir If (x)inetd.conf does not exist, or there is no includedir stanza, this is not a finding. Individually check the mode of any directories in the configuration file. # ls -lLd If any of the included directories has a mode more permissive than 0755, this is a finding.

Fix text

Change the mode of included xinetd configuration directories to 0755. # chmod 0755

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.