Detections
Analytics

4.3.4.14 Ensure netstat daemon is not in use

Information

This entry executes the command netstat -f inet . This service is displays active IP connections on a server.

The recommendation is to leave this disabled.

The netstat command symbolically displays the contents of various network-related data structures for active connections.

This interface requests a report of statistics or address control blocks to those items specified by the inet aka AF_INET (ipv4) address family.

Solution

In /etc/inetd.conf, comment out the netstat entry:

chsubserver -r inetd -C /etc/inetd.conf -d -v 'netstat' -p 'tcp'
refresh -s inetd

See Also

https://workbench.cisecurity.org/benchmarks/22751

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 96a364af8307e696881875c5ee252bd2acfceb0e1722f7a5b8b310a629eab047