An XCCDF Group - A logical subset of the XCCDF Benchmark
iptables
rsync
$ sudo zypper remove rsync
rsyncd
$ sudo systemctl mask --now rsyncd.service
xinetd
tcp_wrappers
$ sudo zypper install tcp_wrappers
tcpd
$ sudo zypper remove tcpd
$ sudo zypper remove xinetd
$ sudo systemctl mask --now xinetd.service
/etc/hosts.deny
/etc/hosts.allow
ALL: ALL
ypbind
ypserv
$ sudo zypper remove ypserv
rsh-server
$ sudo zypper remove rsh-server
rsh
rexec
disable
yes
/etc/xinetd.d/rexec
$ sudo systemctl mask --now rexec.socket
rlogin
/etc/xinetd.d/rlogin
$ sudo systemctl mask --now rlogin.socket
shosts.equiv
$ sudo rm /[path]/[to]/[file]/shosts.equiv
/etc/hosts.equiv
~/.rhosts
$ sudo rm /etc/hosts.equiv
$ rm ~/.rhosts
~/.shosts
$ sudo find / -name '.shosts' -type f -delete
talk-server
$ sudo zypper remove talk-server
talk
$ sudo zypper remove talk
telnet-server
$ sudo zypper remove telnet-server
telnet
$ sudo systemctl mask --now telnet.socket
tftp-server
$ sudo zypper remove tftp-server
tftp
$ sudo systemctl mask --now tftp.service