Ensure nfs_use_reserved_ports is enabled

MediaNivel 1Automatizadaaix

Descripción

The portcheck and nfs_use_reserved_ports parameters force the NFS server process on the local system to ignore NFS client requests that do not originate from the privileged ports range (ports less than 1024). The portcheck and nfs_use_reserved_ports parameters will both be set to 1. This value means that NFS client requests that do not originate from the privileged ports range (ports less than 1024) will be ignored by the local system. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

Cómo se verifica

Método de auditoría: Comando de shell

shell

command -v nfso >/dev/null 2>&1 || exit 1; out=$(nfso -a 2>/dev/null) || exit 1; r=compliant; for p in '^[[:blank:]]*portcheck[[:blank:]]*=[[:blank:]]*1$' '^[[:blank:]]*nfs_use_reserved_ports[[:blank:]]*=[[:blank:]]*1$'; do printf '%s\n' "$out" | grep -Eq -- "$p" || r="missing: $p"; done; echo "$r"

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

nfso -p -o portcheck=1; nfso -p -o nfs_use_reserved_ports=1

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aixhardening
Referencia: CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.14 Ensure nfs_use_reserved_ports is enabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target aix