STIGQter: STIG Summary: Anduril NixOS Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Oct 2025:

NixOS must not have the telnet package installed.

DISA Rule

SV-268131r1131067_rule

Vulnerability Number

V-268131

Group Title

SRG-OS-000074-GPOS-00042

Rule Version

ANIX-00-000780

Severity

CAT I

CCI(s)

• CCI-000197 - For password-based authentication, transmit passwords only cryptographically-protected channels.

Weight

10

Fix Recommendation

Edit the NixOS Configuration file /etc/nixos/configuration.nix or /etc/nixos/flake.nix and remove any references to pkgs.libtelnet, pkgs.busybox, or pkgs.inetutils from the environment.systemPackages list.

Rebuild and switch to the new NixOS configuration:
$ sudo nixos-rebuild switch

Check Contents

Ensure the telnet package is not installed and available with the following command:

$ whereis telnet

telnet:

If there is a path, and the output looks like "telnet: /nix/store/sqiphymcpky1yysgdc1aj4lr9jg9n53a-inetutils-2.2/bin/telnet", this is a finding.

Vulnerability Number

V-268131

Documentable

False

Rule Version

ANIX-00-000780

Severity Override Guidance

Ensure the telnet package is not installed and available with the following command:

$ whereis telnet

telnet:

If there is a path, and the output looks like "telnet: /nix/store/sqiphymcpky1yysgdc1aj4lr9jg9n53a-inetutils-2.2/bin/telnet", this is a finding.

Check Content Reference

M

Target Key

5658