Ensure latest version of openssh is installed

MoyenneNiveau 1Automatiséeaix

Description

OpenSSH is the expected program for remote command line access. It provides encrypted protocols such as SSH and SCP/SFTP. The recommended mechanism for remote access is to use encrypted protocols such as OpenSSH that are designed to prevent the interception of communications. OpenSSH is the standard replacement for clear-text protocols, such as Telnet and FTP. Audit: openssh.base.server fileset major version must be 9 or later.

Méthode de vérification

Méthode d'audit: Commande shell

shell

command -v lslpp >/dev/null 2>&1 || exit 1; v=$(lslpp -Lcq openssh.base.server 2>/dev/null | cut -d: -f3 | cut -d. -f1); [ -n "$v" ] && [ "$v" -ge 9 ] && echo compliant || echo "openssh.base.server major version: $v"

Sortie attendue: compliant

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Install OpenSSH version 9.9 (or later), depending on package source. The current version available from IBM via AIX Web Download Pack Programs is 9.9.3015.1000.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: aixservices
Référence: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.3.1 Ensure latest version of openssh is installed

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target aix