IBM AIX
TMA-AIX-4.3.4.8
Ensure finger daemon is not in use
MediumLevel 1Automatedaix
Description
This entry starts the fingerd daemon. The fingerd daemon provides the server function for the finger command. This allows users to view real-time pertinent user login information on other remote systems. Audit: `lssrc -s inetd -l` must not list the service (count 0).
How it is checked
Audit method: Shell command
shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'finger'); echo "$n"- Expected output
0
How it is fixed
Fix method: Guidance or infrastructure patch
In /etc/inetd.conf, comment out the finger entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'finger' -p tcp lssrc -s inetd && refresh -s inetd
Properties
- Operating systems
- Any
- Tags
- aixservices
- Reference
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.8 Ensure finger daemon is not in use
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aix