Ensure daytime daemon is not in use

MediaNivel 1Automatizadaaix

Descripción

The service should be disabled as it can leave the system vulnerable to DoS ping attacks. This entry starts the daytime service when required. This provides the current date and time to other servers on a network. This daytime service is a defunct time service, typically used for testing purposes only. Audit: `lssrc -s inetd -l` must not list the service (count 0).

Cómo se verifica

Método de auditoría: Comando de shell

shell

command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'daytime'); echo "$n"

Salida esperada: 0

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

In /etc/inetd.conf, comment out the daytime entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'daytime' -p tcp chsubserver -r inetd -C /etc/inetd.conf -d -v 'daytime' -p udp lssrc -s inetd && refresh -s inetd

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aixservices
Referencia: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.4 Ensure daytime daemon is not in use

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target aix