0104-talk-uninstalled：talk Client Uninstalled¶

Rule ID¶

• 0104-talk-uninstalled

Category¶

• system

Severity¶

• warn

Compatible Versions¶

• Linux

Description¶

• The talk software allows users to send and receive messages across systems via terminal sessions. The talk client, which enables session initialization, is installed by default.

Scan Frequency¶

• 1 */5 * * *

Rationale¶

• The software uses unencrypted communication protocols, which introduces security risks.

Risk Items¶

• Hacker intrusion
• Data leakage
• Network security
• Cryptomining risk
• Botnet risk

Audit Method¶

• Run the following command to verify that the talk package is not installed:

# rpm -q talk
package talk is not installed

Remediation¶

• Run the following command to remove the talk package:

# yum remove talk

Impact¶

• Many insecure service clients are used as troubleshooting tools and in test environments. Removing them may suppress the ability to test and troubleshoot. If needed, it is recommended to remove the client after use to prevent accidental or intentional misuse.

Default Value¶

• N/A

References¶

• None

CIS Controls¶

• Version 7 2.6 Address unapproved software Ensure that unauthorized software is removed or the inventory is updated in a timely manner.