TMA-AIX-4.3.4.3
Ensure comsat daemon is not in use
Descripción
This entry starts the comsat service. The comsat daemon receives messages on a datagram port associated with the biff service specification. The recommendation is to leave this service disabled. The comsat daemon is the server that receives reports of incoming mail and notifies users if they have enabled this service with the biff command. Started by the inetd daemon, the comsat daemon is not meant to be used at the command line. Audit: `lssrc -s inetd -l` must not list the service (count 0).
Cómo se verifica
Método de auditoría: Comando de shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'comsat'); echo "$n"- Salida esperada
0
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
In /etc/inetd.conf, comment out the comsat entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'comsat' -p udp lssrc -s inetd && refresh -s inetd
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- aixservices
- Referencia
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.3 Ensure comsat daemon is not in use
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target aix