We've recently gone through a security audit and among several valid and other, quite pointless findings is one that states that tcpwrappers is not disabled. I've never used tcpwrappers so I don't have a great deal of experience in how it is configured.
Having said that I've always been under the impression that it isn't simply disabled or enabled like a daemon. Instead, rules are created which define services that use it and which servers are and are not allowed to access the service.
By default, if nothing is defined then tcpwrappers is, effectively, disabled.
Am I wrong?