Ensure dt service is not in use

MediumLevel 1Automatedaix

Description

This entry executes the CDE startup script which starts the AIX Common Desktop Environment. If there is not an lft connected to the system and there are no other X11 clients that require CDE, remove the dt entry. Audit: `lsitab dt` must return nothing (no /etc/inittab entry).

How it is checked

Audit method: Shell command

shell

command -v lsitab >/dev/null 2>&1 || exit 1; out=$( { lsitab dt; lsitab dt_nogb ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Expected output: compliant

How it is fixed

Fix method: Guidance or infrastructure patch

In /etc/inittab, remove the dt and dt_nogb entries: rmitab dt rmitab dt_nogb

Properties

Operating systems: Any
Tags: aixservices
Reference: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.1.2 Ensure dt service is not in use

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target aix