Uninstall the telnet server
An XCCDF Rule
Description
The telnet daemon should be uninstalled.
Rationale
telnet allows clear text communications, and does not protect
any data transmission between client and server. Any confidential data
can be listened and no integrity checking is made.'
- ID
- xccdf_org.ssgproject.content_rule_package_telnetd_removed
- Severity
- High
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
package --remove=telnetd
Remediation - Ansible
- name: Ensure telnetd is removed
package:
name: telnetd
state: absent
tags:
- NIST-800-53-CM-6(a)
Remediation - Shell Script
# CAUTION: This remediation script will remove telnetd
# from the system, and may remove any packages
# that depend on telnetd. Execute this
# remediation AFTER testing on a non-production
# system!
Remediation - Puppet
include remove_telnetd
class remove_telnetd {
package { 'telnetd':
ensure => 'purged',
}