Details

discard is a network service that simply discards all data it receives. This service is

intended for debugging and testing purposes. It is recommended that this service be

disabled.

*Rationale*

Disabling this service will reduce the remote attack surface of the system.

Solution

Remove or comment out any discard lines in /etc/inetd.conf-#discard stream tcp nowait root internal

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/91

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits