IBM AIX
TMA-AIX-4.3.4.10
Ensure imap2 daemon is not in use
MediumLevel 1Automatedaix
Description
This entry starts the imap2 service when required. The imap2 service orInternet Message Access Protocol (IMAP) supports the IMAP4 remote mail access protocol. It works with sendmail and bellmail. This service should be disabled if it is not required. Audit: `lssrc -s inetd -l` must not list the service (count 0).
How it is checked
Audit method: Shell command
shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'imap2'); echo "$n"- Expected output
0
How it is fixed
Fix method: Guidance or infrastructure patch
In /etc/inetd.conf, comment out the imap2 entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'imap2' -p tcp lssrc -s inetd && refresh -s inetd
Properties
- Operating systems
- Any
- Tags
- aixservices
- Reference
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.10 Ensure imap2 daemon is not in use
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aix