← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-4701

CAT III (Low)

The system must not have the finger service active.

Rule ID

SV-45810r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-001551

Discussion

The finger service provides information about the system's users to network clients. This information could expose more information for potential used in subsequent attacks.

Check Content

# grep disable /etc/xinetd.d/finger
If the finger service is not disabled, this is a finding.

Fix Text

Edit /etc/xinetd.d/finger and set "disable=yes"