TMAegisBeta
More rules for aix

IBM AIX

TMA-AIX-4.3.4.20

Ensure rquotad daemon is not in use

MediumLevel 1Automatedaix

Description

This entry starts the rquotad service when required. This allows NFS clients to enforce disk quotas on locally mounted filesystems. The rquotad service allows NFS clients to enforce disk quotas on file systems that are mounted on the local system. This service should be disabled if it is not required. Audit: `lssrc -s inetd -l` must not list the service (count 0).

How it is checked

Audit method: Shell command

shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c '[[:blank:]]rquotad'); echo "$n"
Expected output
0

How it is fixed

Fix method: Guidance or infrastructure patch

Use chsubserver to disable this service in /etc/inetd.conf and if running, refresh inetd: chsubserver -r inetd -C /etc/inetd.conf -d -v 'rquotad' -p 'udp' refresh -s inetd

Properties

Operating systems
Any
Tags
aixservices
Reference
CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.20 Ensure rquotad daemon is not in use

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell
tmaegis scan --target aix