IBM AIX
TMA-AIX-4.3.4.7
Ensure exec daemon is not in use
Beschreibung
The recommendation is that rexecd is disabled. This service can be performed securely using OpenSSH. This entry starts the rexecd daemon when required. This daemon executes a command from a remote system once the connection has been authenticated. The exec service is used to execute a command sent from a remote server. The username and passwords are passed over the network in clear text and therefore insecurely. Unless required the rexecd daemon will be disabled. Audit: `lssrc -s inetd -l` must not list the service (count 0).
So wird geprüft
Prüfmethode: Shell-Befehl
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'exec'); echo "$n"- Erwartete Ausgabe
0
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
In /etc/inetd.conf, comment out the exec entry: chsubserver -r inetd -C /etc/inetd.conf -d -v 'exec' -p 'tcp6' refresh -s inetd
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- aixservices
- Referenz
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.7 Ensure exec daemon is not in use
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target aix