Ensure rstatd daemon is not in use

MediaNivel 1Automatizadaaix

Descripción

This entry starts the rstatd daemon. This service is used to provide kernel statistics and other monitorable parameters such as CPU usage, system uptime, network usage etc. This service should be disabled if not explicitly required by performance monitoring software to collect statistics. The rstatd service is used to provide kernel statistics and other monitorable parameters pertinent to the system such as: CPU usage, system uptime, network usage etc. An attacker may use this information in a DoS attack. Audit: `lssrc -s inetd -l` must not list the service (count 0).

Cómo se verifica

Método de auditoría: Comando de shell

shell

command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'rstatd'); echo "$n"

Salida esperada: 0

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

In /etc/inetd.conf, comment out the rstatd entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'rstatd' -p udp lssrc -s inetd && refresh -s inetd

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aixservices
Referencia: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.21 Ensure rstatd daemon is not in use

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target aix