telnet-server-not-installed

This module ensures the telnet server package is not installed on the system

Maintainer

Vratislav Podzimek

Module stats

Total Downloads: 356
Updated: Dec 30, 2021

Installation version

Version
Released on Dec 9, 2021

Tags

Installation

                    
cfbs add telnet-server-not-installed
Description
Dependencies
Comments

Telnet is a protocol for providing an insecure remote virtual terminal access to hosts over network. It is generally considered obsolete and dangerous and its use has been a root cause of security issues. It should not be used except for very specific use cases.

This module makes sure that the Telnet server packages are not installed on hosts and thus also not running.

Examples

Example of a cf-agent run on a host that has the telnet-server package installed:

[root@hub]# cf-agent -KI
    info: Successfully removed package 'telnet-server'

Adding exceptions

If Telnet server packages are really needed on some specific hosts, they can be marked as such by defining the hardening_telnet_server_allowed class in either augments or CMDB.

Dependencies

comments powered by Disqus