0082-xinetd-uninstalled — xinetd is Installed¶

Rule ID¶

• 0082-xinetd-uninstalled

Category¶

• system

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• The extended Internet services daemon (xinetd) is an open-source super-server daemon that replaces the original inetd daemon. The xinetd daemon listens for known services and dispatches the appropriate daemon to correctly respond to service requests.

Scan Frequency¶

• 0 */30 * * *

Rationale¶

• If the network services are not required, it is recommended to remove the software package to reduce the system's attack surface.

• Note: If network services are needed, ensure that any unnecessary services are stopped and disabled.

Risk Items¶

• Data breach

Audit Method¶

• Run the following command to verify that the xinetd package is not installed:

# rpm -q xinetd
package xinetd is not installed

Remediation¶

• Run the following command to remove the xinetd package:

# yum remove xinetd

Impact¶

• Services that depend on xinetd may experience issues or the process may be terminated.

Default Value¶

• N/A

References¶

• None

CIS Controls¶

• Version 7 2.6 Address Unapproved Software Ensure that unapproved software is removed or the inventory is updated in a timely manner.

• 9.2 Ensure Only Approved Ports, Protocols, and Services Are Running Ensure that only network ports, protocols, and services with validated business needs are running on each system.