TMA-AIX-4.5.1
Ensure sockthresh is configured
MediumLevel 1Automatedaix
Description
The sockthresh parameter value determines what percentage of the total memory allocated to networking, set via thewall, can be used for sockets. The sockthresh parameterwill be set to 60. This means that 60% of network memory can be used to service new socket connections, the remaining 40% is reserved for existing sockets. This ensures a quality of service for existing connections. Audit: `no -o sockthresh` must report 60.
How it is checked
Audit method: Shell command
shell
command -v no >/dev/null 2>&1 || exit 1; out=$(no -o sockthresh 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'- Expected output
sockthresh=60
How it is fixed
Fix method: Guidance or infrastructure patch
no -p -o sockthresh=60 (sets the running value and makes it persistent in /etc/tunables/nextboot)
Properties
- Operating systems
- Any
- Tags
- aixhardening
- Reference
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.1 Ensure sockthresh is configured
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aix