Services (UNIX)

Module: Startup Files

This option lets you enable or disable the Services template files that are used by module checks to identify system-owned processes that should be Ignored, Mandatory, Optional, or Forbidden on your system. Services templates also have two parameter lists: a list of Mandatory Parameters (parameters that must be used with a process), and a list of Forbidden Parameters (parameters that must not be used with a process). When parameters are duplicated in both the Forbidden and Mandatory lists, both are reported. (For example, if the process /etc/init has a forbidden parameter of -q and a mandatory parameter of -q, when the -q parameter is found, it is reported as being forbidden.) Entries in template services and parameter lists are treated as case sensitive.

The following table lists the error messages for the check.

Table: Error messages for Services

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: STKU_DUPLICATE_TEMPLATE_ENTRY

Category: Policy Compliance

UNIX (5854)

Title: Duplicate template entry

Description:ESM found a duplicate entry in the template file. When it finds duplicate entries, ESM cannot determine which entry should be used, so the first entry is used and all and any subsequent same or duplicate entries are ignored.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: STKU_SERVICELOGIC_GREEN

Category: Policy Compliance

UNIX (5875)

Title: Service template logic

Description:Service template entry logic evaluated to true.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: STKU_SERVICELOGIC_YELLOW

Category: Policy Compliance

UNIX (5876)

Title: Service template logic

Description:Service template entry logic evaluated to true.

Severity: yellow-1

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: STKU_SERVICELOGIC_RED

Category: Policy Compliance

UNIX (5877)

Title: Service template logic

Description:Service template entry logic evaluated to true.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]