IBM AIX
TMA-AIX-4.3.4.30
Ensure time daemon is not in use
Descripción
This entry starts the time service when required. This service can be used to synchronize system clocks. The time service is an obsolete process used to synchronize system clocks at boot time. This has been superseded by NTP, which should be use if time synchronization is necessary. Unless required the time service will be disabled. Audit: `lssrc -s inetd -l` must not list the service (count 0).
Cómo se verifica
Método de auditoría: Comando de shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c '[[:blank:]]time'); echo "$n"- Salida esperada
0
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Use chsubserver to disable this service in /etc/inetd.conf: chsubserver -r inetd -C /etc/inetd.conf -d -v 'time' -p 'tcp' chsubserver -r inetd -C /etc/inetd.conf -d -v 'time' -p 'udp' refresh -s inetd
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- aixservices
- Referencia
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.30 Ensure time daemon is not in use
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target aix