cyberstrikeus 5.4 Ensure echo is not enabled (Scored)
Profile Applicability
- Level 1
Description
echo is a network service that responds to clients with the data sent to it by the client. This service is intended for debugging and testing purposes. It is recommended that this service be disabled.
Rationale
Disabling this service will reduce the remote attack surface of the system.
Audit Procedure
Using Command Line
Ensure the echo services are not enabled:
grep ^echo /etc/inetd.conf
Expected Result
No results should be returned.
Remediation
Using Command Line
Remove or comment out any echo lines in /etc/inetd.conf:
sed -i 's/^echo/#echo/' /etc/inetd.conf
Default Value
Not enabled by default on Ubuntu 12.04 LTS Server.
References
- CIS Ubuntu 12.04 LTS Server Benchmark v1.1.0
Profile
Level 1 - Scored