Table of Contents

2.2.21 Ensure talk server is not enabled (Scored)

Profile Applicability

Level 1 - Server
Level 1 - Workstation 

Description

The talk software makes it possible for users to send and receive messages across systems through a terminal session. The talk client (allows initiate of talk sessions) is installed by default.

Rationale

The software presents a security risk as it uses unencrypted protocols for communication.

Audit

Run the following command and verify result is not “enabled”:

# systemctl is-enabled ntalk
disabled

Remediation

Run the following commands to disable talk:

# systemctl disable ntalk