3.3.2.9 inetd - aka Super Daemon

Information

When none of services run and managed by inetd are required then disable the inetd daemon itself.

This is the preferred state.

Rationale:

When no inetd managed services are required there is no need to start the daemon at boot time.

An administrator can manually start the inetd service post-IPL, should any of the inetd supported services are/become required.

Impact:

When an inetd service is required this service is permitted. Be sure to review the section Inetd (aka Super Daemon) Services later in the document.

Solution

Review any active inetd services:

refresh -s inetd
lssrc -ls inetd

NOTE: If there are active services and the services are required, do not disable inetd. Skip to the next section and consider the implementation of TCP Wrappers to secure access to these active services. If the active services are not required disable them via the chsubserver command.
Disable inetd if there are no active services:

chrctcp -d inetd
stopsrc -s inetd

Default Value:

Enabled

Additional Information:

Reversion:

Comment in inetd startup in /etc/rc.tcpip:

chrctcp -a inetd

See Also

https://workbench.cisecurity.org/files/3525

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: b6d968d8d19dae1b41d405c848c7be08b4fb192ddcb242d49f61528aba5bf058