IBM AIX
TMA-AIX-4.3.2.13
Ensure timed is not in use
Beschreibung
The timed daemon implements the legacy UNIX time service. The UNIX time service is obsolete and has been replaced by NTP, it is recommended that the timed fileset be removed to reduce the potential attack surface. If time synchronization is required in your environment use xntp. Audit: the timed start line in /etc/rc.tcpip must be commented out and the timed subsystem must not be active.
So wird geprüft
Prüfmethode: Shell-Befehl
command -v lssrc >/dev/null 2>&1 || exit 1; [ -r /etc/rc.tcpip ] || exit 1; out=$( { grep -E "^[[:blank:]]*start[[:blank:]]+/usr/(sbin|lib)/timed([[:blank:]]|$)" /etc/rc.tcpip; lssrc -s timed | awk 'NR>1 && $NF=="active"' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20- Erwartete Ausgabe
compliant
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Run the following command to remove the software: # /usr/sbin/installp -u bos.net.tcp.timed bos.net.tcp.server - OR - - IF - the bos.net.tcp.timed fileset is required as a dependency: Run the following script to stop and disable timed #!/usr/bin/ksh DAEMONS="timed" for l_daemon in $DAEMONS; do /usr/sbin/chrctcp -d $l_daemon /usr/bin/stopsrc -s $l_daemon done
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- aixhardening
- Referenz
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.2.13 Ensure timed is not in use
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target aix