Ensure sendmail version information is hidden

MediaNivel 1Automatizadaaix

Descripción

The recommendation is to change both the default sendmail greeting and HELP output to not display the sendmail version. The sendmail deamon has a history of security vulnerabilities. The recommendation is to change the default sendmail settings that display the sendmail version and other related information. Audit: SmtpGreetingMessage must be set without "Sendmail $b" and /etc/mail/helpfile must exist.

Cómo se verifica

Método de auditoría: Comando de shell

shell

[ -r /etc/mail/sendmail.cf ] || exit 1; l=$(grep -i "^O SmtpGreetingMessage" /etc/mail/sendmail.cf); if [ -z "$l" ]; then echo "SmtpGreetingMessage not set"; else case "$l" in *"Sendmail \$b"*) echo "version disclosed: $l";; *) [ -e /etc/mail/helpfile ] && echo compliant || echo "sendmail helpfile missing";; esac; fi

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Create a backup copy of /etc/mail/sendmail.cf: cp -p /etc/mail/sendmail.cf /etc/mail/sendmail.cf.pre_cis Edit: vi /etc/mail/sendmail.cf Replace: O SmtpGreetingMessage=$j Sendmail $b With: O SmtpGreetingMessage=mailerready Ensure Sendmail helpfile exists test -e /etc/mail/helpfile || touch /etc/mail/helpfile

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aixservices
Referencia: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.4.1 Ensure sendmail version information is hidden

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target aix