Ensure rstatd daemon is not in use

SedangLevel 1Otomatisaix

Deskripsi

This entry starts the rstatd daemon. This service is used to provide kernel statistics and other monitorable parameters such as CPU usage, system uptime, network usage etc. This service should be disabled if not explicitly required by performance monitoring software to collect statistics. The rstatd service is used to provide kernel statistics and other monitorable parameters pertinent to the system such as: CPU usage, system uptime, network usage etc. An attacker may use this information in a DoS attack. Audit: `lssrc -s inetd -l` must not list the service (count 0).

Cara pemeriksaan

Metode audit: Perintah shell

shell

command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'rstatd'); echo "$n"

Output yang diharapkan: 0

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

In /etc/inetd.conf, comment out the rstatd entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'rstatd' -p udp lssrc -s inetd && refresh -s inetd

Properti

Sistem operasi: Apa saja
Tag: aixservices
Referensi: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.21 Ensure rstatd daemon is not in use

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target aix