Uninstall telnet-server Package
An XCCDF Rule
Description
The telnet-server package can be removed with the following command:
$ sudo yum erase telnet-server
Rationale
It is detrimental for operating systems to provide, or install by default,
functionality exceeding requirements or mission objectives. These
unnecessary capabilities are often overlooked and therefore may remain
unsecure. They increase the risk to the platform by providing additional
attack vectors.
The telnet service provides an unencrypted remote access service which does
not provide for the confidentiality and integrity of user passwords or the
remote session. If a privileged user were to login using this service, the
privileged user password could be compromised.
Removing the telnet-server package decreases the risk of the
telnet service's accidental (or intentional) activation.
- ID
- xccdf_org.ssgproject.content_rule_package_telnet-server_removed
- Severity
- High
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
package --remove=telnet-server
Remediation - Ansible
- name: Ensure telnet-server is removed
package:
name: telnet-server
state: absent
tags:
- NIST-800-53-CM-6(a)
Remediation - Puppet
include remove_telnet-server
class remove_telnet-server {
package { 'telnet-server':
ensure => 'purged',
}
Remediation - Shell Script
# CAUTION: This remediation script will remove telnet-server
# from the system, and may remove any packages
# that depend on telnet-server. Execute this
# remediation AFTER testing on a non-production
# system!