IBM AIX
TMA-AIX-4.3.4.20
Ensure rquotad daemon is not in use
MediumLevel 1Automatedaix
Description
This entry starts the rquotad service when required. This allows NFS clients to enforce disk quotas on locally mounted filesystems. The rquotad service allows NFS clients to enforce disk quotas on file systems that are mounted on the local system. This service should be disabled if it is not required. Audit: `lssrc -s inetd -l` must not list the service (count 0).
How it is checked
Audit method: Shell command
shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c '[[:blank:]]rquotad'); echo "$n"- Expected output
0
How it is fixed
Fix method: Guidance or infrastructure patch
Use chsubserver to disable this service in /etc/inetd.conf and if running, refresh inetd: chsubserver -r inetd -C /etc/inetd.conf -d -v 'rquotad' -p 'udp' refresh -s inetd
Properties
- Operating systems
- Any
- Tags
- aixservices
- Reference
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.20 Ensure rquotad daemon is not in use
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aix