>From 26ecc844c47723a03c87bcdb3d0a8409f3e93356 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sun, 13 Apr 2014 01:39:04 -0400 Subject: [PATCH 09/15] New RHEL6 Rule: package_telnet_removed Added in support of CIS baseline requirements --- RHEL/6/input/checks/package_telnet_removed.xml | 26 ++++++++++++++++++++ RHEL/6/input/checks/templates/packages_removed.csv | 1 + RHEL/6/input/services/obsolete.xml | 15 +++++++++++ 3 files changed, 42 insertions(+), 0 deletions(-) create mode 100644 RHEL/6/input/checks/package_telnet_removed.xml diff --git a/RHEL/6/input/checks/package_telnet_removed.xml b/RHEL/6/input/checks/package_telnet_removed.xml new file mode 100644 index 0000000..f935edc --- /dev/null +++ b/RHEL/6/input/checks/package_telnet_removed.xml @@ -0,0 +1,26 @@ + + + + + Package telnet Removed + + Red Hat Enterprise Linux 6 + + The RPM package telnet should be removed. + + + + + + + + + + + telnet + + diff --git a/RHEL/6/input/checks/templates/packages_removed.csv b/RHEL/6/input/checks/templates/packages_removed.csv index fe2df22..18d89bd 100644 --- a/RHEL/6/input/checks/templates/packages_removed.csv +++ b/RHEL/6/input/checks/templates/packages_removed.csv @@ -34,6 +34,7 @@ squid subscription-manager sysstat talk-server +telnet telnet-server tftp-server vsftpd diff --git a/RHEL/6/input/services/obsolete.xml b/RHEL/6/input/services/obsolete.xml index 1792120..cbeb91b 100644 --- a/RHEL/6/input/services/obsolete.xml +++ b/RHEL/6/input/services/obsolete.xml @@ -106,6 +106,21 @@ telnet service's accidental (or intentional) activation. + + +Remove telnet Clients +The telnet client allows users to start connections to other +systems via the telnet protocol. + +The telnet protocol is insecure and unencrypted. The use +of an unencrypted transmission medium could allow an unauthorized user +to steal credentials. The ssh package provides an +encrypted session and stronger security and is included in Red Hat +Enterprise Linux. + + + + -- 1.7.1