IBM AIX
TMA-AIX-4.5.8
Ensure ipignoreredirects is enabled
MediumLevel 1Automatedaix
Description
The ipignoreredirects parameter determines whether or not the system will process IP redirects. The ipignoreredirects will be set to 1, to prevent IP re-directs being processed by the system. Audit: `no -o ipignoreredirects` must report 1.
How it is checked
Audit method: Shell command
shell
command -v no >/dev/null 2>&1 || exit 1; out=$(no -o ipignoreredirects 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'- Expected output
ipignoreredirects=1
How it is fixed
Fix method: Guidance or infrastructure patch
no -p -o ipignoreredirects=1 (sets the running value and makes it persistent in /etc/tunables/nextboot)
Properties
- Operating systems
- Any
- Tags
- aixnetwork
- Reference
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.8 Ensure ipignoreredirects is enabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aix