Ensure snapp is not installed

MediumLevel 1Automatedaix

Description

snapp provides a perl-based interface to do the initial network configuration of an IBM RISC System/6000, from a Palm Pilot, via RS232C. Systems running as logical partitions will not have access to an RS232C port, network configuration is performed either via NIM or through the virtual terminal provided by the Hardware Management Console. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

How it is checked

Audit method: Shell command

shell

command -v lslpp >/dev/null 2>&1 || exit 1; lslpp -L >/dev/null 2>&1 || exit 1; out=$( { lslpp -L | grep -i 'bos.net.snapp' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Expected output: compliant

How it is fixed

Fix method: Guidance or infrastructure patch

Remove the software installp -u bos.net.snapp

Properties

Operating systems: Any
Tags: aixservices
Reference: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.1.6 Ensure snapp is not installed

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target aix