Details

daytime is a network service that responds with the server’s current date and time. This service is intended for debugging and testing purposes. It is recommended that this service be disabled. Disabling this service will reduce the remote attack surface of the system.

Solution

Remove or comment out any daytime lines in /etc/inetd.conf- #daytime stream tcp nowait root internal

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/85

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits