Re: Linux auditing checklist, documents

[jm <jm () hcn com au>]

Gurpreet Singh wrote:
> <snip>
>
> Don't let system issue file to be displayed 
>  You should not  display your  system issue file when people log in remotely
> . To do this,  you can 
> change the telnet option in your "/etc/inetd.conf".
> To do this change the line in "/etc/inetd.conf":
>
> telnet  stream  tcp     nowait  root    /usr/sbin/tcpd  in.telnetd
> to look like:
>  telnet  stream  tcp     nowait  root    /usr/sbin/tcpd  in.telnetd -h 
>  Adding the "-h" flag on the end will cause the daemon to not display any
> system information and  just hit the user with a login: prompt.  I will
> recommend to use sshd instead. 
>
> <snip>
I find it ironic that in a discussion regarding linux security you 
mention having telnetd enabled. These days I'm sure most (all?) distro's 
ship with telnetd disabled, and IMHO that's the way it should stay.