====== 2.1.7 Ensure talk server is not enabled (Scored)====== =====Profile Applicability===== Level 1 - Server Level 1 - Workstation =====Description===== The ''talk'' software makes it possible for users to send and receive messages across systems through a terminal session. The talk client (allows initiate of talk sessions) is installed by default. =====Rationale===== The software presents a security risk as it uses unencrypted protocols for communication. =====Audit===== Verify the ''talk'' service is not enabled. Run the following commands and verify results are as indicated: grep -R "^talk" /etc/inetd.* grep -R "^ntalk" /etc/inetd.* No results should be returned \\ \\ check ''/etc/xinetd.conf'' and ''/etc/xinetd.d/*'' and verify all ''talk'' services have ''disable = yes'' set. =====Remediation===== Comment out or remove any lines starting with ''talk'' or ''ntalk'' from ''/etc/inetd.conf'' and ''/etc/inetd.d/*''.\\ Set ''disable = yes'' on all ''talk'' and ''ntalk'' services in ''/etc/xinetd.conf'' and ''/etc/xinetd.d/*''.