Details

This entry starts the ttdbserver servicewhen required. It is not a pre-requisite service for CDE, which is fully functional when it is disabled.

The ttdbserver service is the tool-talk database service for CDE. This service runs as root and should be disabled. Unless required the ttdbserver service will be disabled.

Solution

In /etc/inetd.conf, comment out the ttdbserver entry-

chsubserver -r inetd -C /etc/inetd.conf -d -v ‘ttdbserver’ -p ‘sunrpc_tcp’

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/528

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits