The system must use an access control program.

From HP-UX 11.31 Security Technical Implementation Guide

Associated with IA controls: EBRU-1

Associated with: CCI-000366

SV-35198r1_rule The system must use an access control program.

Vulnerability discussion

Access control programs (such as TCP_WRAPPERS) provide the ability to enhance system security posture.

Check content

Locate the inetd.conf file (normally located within the /etc directory). # find /etc -type f -name inetd.conf Determine if TCP_WRAPPERS is used. The following example demonstrates one possible single inetd.conf line first without and then with the service tcp wrapped. telnet stream tcp6 nowait root /usr/sbin/telnetd telnetd telnet stream tcp6 nowait root /usr/sbin/tcpd telnetd # cat /inetd.conf | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' |grep -v "^#" | grep tcpd If there are unwrapped active services listed, this is a finding.

Fix text

Edit /etc/inetd.conf and use tcpd to wrap active services.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.