2.1.7 Ensure talk server is not enabled (Scored) [SecScan]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== 2.1.7 Ensure talk server is not enabled (Scored)======
=====Profile Applicability=====  
<code>
Level 1 - Server 
Level 1 - Workstation
</code>

=====Description=====
The ''talk'' software makes it possible for users to send and receive messages across systems through a terminal session. The talk client (allows initiate of talk sessions) is installed by default.

=====Rationale=====
The software presents a security risk as it uses unencrypted protocols for communication.

=====Audit===== 
Verify the ''talk'' service is not enabled. Run the following commands and verify results are as indicated:
<Code:bash>
grep -R "^talk" /etc/inetd.*
grep -R "^ntalk" /etc/inetd.*
</Code>
No results should be returned \\ \\
check ''/etc/xinetd.conf'' and ''/etc/xinetd.d/*'' and verify all ''talk'' services have ''disable = yes'' set.

=====Remediation===== 
Comment out or remove any lines starting with ''talk'' or ''ntalk'' from ''/etc/inetd.conf'' and ''/etc/inetd.d/*''.\\
Set ''disable = yes'' on all ''talk'' and ''ntalk'' services in ''/etc/xinetd.conf'' and ''/etc/xinetd.d/*''.