2.1.7 Ensure talk server is not enabled (Scored)
Profile Applicability
Level 1 - Server Level 1 - Workstation
Description
The talk software makes it possible for users to send and receive messages across systems through a terminal session. The talk client (allows initiate of talk sessions) is installed by default.
Rationale
The software presents a security risk as it uses unencrypted protocols for communication.
Audit
Verify the talk service is not enabled. Run the following commands and verify results are as indicated:
grep -R "^talk" /etc/inetd.* grep -R "^ntalk" /etc/inetd.*
No results should be returned
check /etc/xinetd.conf and /etc/xinetd.d/* and verify all talk services have disable = yes set.
Remediation
Comment out or remove any lines starting with talk or ntalk from /etc/inetd.conf and /etc/inetd.d/*.
Set disable = yes on all talk and ntalk services in /etc/xinetd.conf and /etc/xinetd.d/*.