## Documents for network

Code [netw001f]

The listed file is world writable. chmod -ow file to correct.

Code [netw002f]

The listed file is not owned by an 'administrative' account. Change the ownership, or add your admin user to 'Tiger_Admin_Accounts' list of valid administrative users.

Code [netw003f]

The inetd daemon is not configured with login enabled. If xinetd based, add the 'filelog' or 'syslog' options in /etc/sysconfig/xinetd configuration file.

Code [netw004f]

The syslogd daemon should be executing to log system events. Please add the appropriate start link to /etc/rc.d/rc[RUNLEVEL].d to the /etc/rc.d/init.d/syslog script, or install syslog if it isn't.

Code [netw005f]

Omniback is installed, but there is no cell server specified. Please put the IP address of your cell server in /usr/omni/config/cell/cell_server

Code [netw006f]

Please specify the cell server by IP address in /usr/omni/config/cell/cell_server to prevent DNS spoofing.

Code [netw006f]

Disable fingerd in inetd's config file and restart inetd. If you're running fingerd as a standalone daemon, please disable.

Code [netw007f]

Disable identd in inetd's config file and restart inetd. If you're running identd as a standalone daemon, please disable.

Code [netw008f]

The listed service should be disabled in inetd's config file.

Code [netw009f]

The listed routing daemon should be disabled.

Code [netw010f]

/etc/securetty does not exist. Please create it!

Code [netw011f]

/etc/securetty contains an invalid entry.

Code [netw012f]

/etc/securetty is not OWNED by an admin user.

Code [netw013f]

/etc/securetty is not OWNED by an admin group.

Code [netw014f]

/etc/securetty has world write permissions.

Code [netw015f]

IP Forwarding is not permitted. Please disable ip forwarding.

Code [netw016f]

Your version of BIND is old, update to a more secure version.

Code [netw017f]

Your version of wu-ftpd is old, update to a more secure version.

Code [netw018f]

There is an administrative user (low UID) which can access the local FTP server. If the local FTP server is enabled and a user with administrative rights can access it remotely this might lead to a security compromise of the system. It is recommended for administrative users to be added into /etc/ftpusers if you have a FTP server installed.

Code [netw019w]

The sendmail configuration file (sendmail.cf) has the default sendmail banner. This means that when the mail server is active it publishes the version you are currently running. Attackers can use this information to determine if you are running a vulnerable version.

Code [netw020f]

There is no ftpusers configuration file. In some systems this might enable all administrative users (low UID) to access the local FTP server if it is enabled (some other systems might deprecate its use). It is recommended that administrative users are added into /etc/ftpusers if you have a FTP server installed.

Code [netw021w]

There is a restricted user (uses a restricted shell) which can access the local FTP server. If the local FTP server is enabled and a restricted user can access it remotely this might lead to a security compromise of the system. It is recommended for restricted users to be added into /etc/ftpusers if you have a FTP server installed.