Rules Related To 'xinetd'

Component overview

Relevant packages:

Relevant groups:

None

Changelog:

No changes recorded.

Relevant rules:

Rule details

Uninstall xinetd package if not used by network services

package_xinetd_removed

Description

The xinetd package should not be present in the container or container image. Remove the xinetd package from Containerfile and rebuild the container image.

Rationale

Removing the xinetd package decreases the risk of the xinetd service's accidental (or intentional) activation.

Disable xinetd Service

service_xinetd_disabled

Description

The xinetd service can be disabled with the following command:

$ sudo systemctl mask --now xinetd.service

Rationale

The xinetd service provides a dedicated listener service for some programs, which is no longer necessary for commonly-used network services. Disabling it ensures that these uncommon services are not running, and also prevents attacks against xinetd itself.