| name | cis-ubuntu1204-v110-5-1-4 |
| description | Ensure talk server is not enabled |
| category | cis-os-hardening |
| version | 1.1.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu",12.04,"linux","talk","legacy-services","inetd"] |
| cis_id | 5.1.4 |
| cis_benchmark | CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
5.1.4 Ensure talk server is not enabled (Scored)
Profile Applicability
Description
The talk software makes it possible for users to send and receive messages across systems through a terminal session. The talk client (allows initiate of talk sessions) is installed by default.
Rationale
The software presents a security risk as it uses unencrypted protocols for communication.
Audit Procedure
Using Command Line
Ensure the talk services are not enabled:
grep ^talk /etc/inetd.conf
grep ^ntalk /etc/inetd.conf
Expected Result
No results should be returned.
Remediation
Using Command Line
Remove or comment out any talk or ntalk lines in /etc/inetd.conf:
sed -i 's/^talk/#talk/' /etc/inetd.conf
sed -i 's/^ntalk/#ntalk/' /etc/inetd.conf
Default Value
Not enabled by default on Ubuntu 12.04 LTS Server.
References
- CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
Profile
Level 1 - Scored