Details

discard is a network service that simply discards all data it receives. This service is intended for debugging and testing purposes. It is recommended that this service be disabled. Disabling this service will reduce the remote attack surface of the system.

Solution

Remove or comment out any discard lines in /etc/inetd.conf- #discard stream tcp nowait root internal

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/85

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits