2.1.13 Disable chargen-stream

Information

chargen-stream is a network service that responds with 0 to 512 ASCII characters for each connection it receives. This service is intended for debugging and testing purposes. It is recommended that this service be disabled.

Rationale:

Disabling this service will reduce the remote attack surface of the system.

Solution

Disable the chargen-stream service by running the following command:

# chkconfig chargen-stream off

Default Value:

OS Default: Disabled

See Also

https://workbench.cisecurity.org/files/3096

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv6|9.1, CSCv7|9.2

Plugin: Unix

Control ID: a3e3e4d9aa8f8c009f3bec707717769af72a245f367c4454f300d9de9691f0f3