TMA-AIX-4.5.2
Ensure bcastping is disabled
MediumLevel 1Automatedaix
Description
The bcastping parameter determines whether the system responds to ICMP echo packets sent to the broadcast address. The bcastping parameter will be set to 0. This means that the system will not respond to ICMP packets sent to the broadcast address. Audit: `no -o bcastping` must report 0.
How it is checked
Audit method: Shell command
shell
command -v no >/dev/null 2>&1 || exit 1; out=$(no -o bcastping 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'- Expected output
bcastping=0
How it is fixed
Fix method: Guidance or infrastructure patch
no -p -o bcastping=0 (sets the running value and makes it persistent in /etc/tunables/nextboot)
Properties
- Operating systems
- Any
- Tags
- aixhardening
- Reference
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.2 Ensure bcastping is disabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aix