Skip to content

Commit

Permalink
Improve the telnet description
Browse files Browse the repository at this point in the history
Signed-off-by: Tim Smith <[email protected]>
  • Loading branch information
tas50 committed Nov 17, 2024
1 parent 2ec91e5 commit 4ae0a47
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions core/mondoo-linux-security.mql.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -749,7 +749,7 @@ queries:
desc: |-
`rsh`, sometimes referred to as Remote Shell, is a command-line client/server suite or tools (rsh, rlogin, and rcp) used to execute commands on a remote machine.

Check warning on line 750 in core/mondoo-linux-security.mql.yaml

View workflow job for this annotation

GitHub Actions / Run spell check

`rcp` is not a recognized word. (unrecognized-spelling)
`rsh` is inherently insecure because it transmits data, including passwords, in plaintext over the network, making it vulnerable to interception and includes weak host-based authentiction. If possible use more secure commands such as SSH, which encrypt the entire session, ensuring that sensitive information and files remain secure from unauthorized access.
`rsh` is inherently insecure because it transmits data, including passwords, in plaintext over the network, making it vulnerable to interception and includes weak host-based authentiction. If possible use more secure commands such as SSH, which encrypt the entire session, ensuring that sensitive information and files remain secure from unauthorized access.

Check warning on line 752 in core/mondoo-linux-security.mql.yaml

View workflow job for this annotation

GitHub Actions / Run spell check

`authentiction` is not a recognized word. (unrecognized-spelling)
remediation: |-
Run these commands to stop and disable `rsh`, `rlogin`, and `rexec`:
Expand All @@ -771,7 +771,10 @@ queries:
service("telnet.socket").enabled == false
service("telnet.socket").running == false
docs:
desc: The `telnet-server` package contains the `telnet` daemon, which accepts connections from users from other systems via the `telnet` protocol.
desc: |-
Telnet is a protocol used to connect and manage remote computers via command-line interfaces over a network. It is considered insecure because it transmits data, including login credentials, in plaintext, making it vulnerable to interception and unauthorized access.
If possible use more secure commands such as SSH, which encrypt the entire session, ensuring that sensitive information and files remain secure from unauthorized access.
remediation: |-
Run this command to stop and disable telnet:
Expand Down

0 comments on commit 4ae0a47

Please sign in to comment.