TMA-AIX-4.3.4.7
Ensure exec daemon is not in use
Deskripsi
The recommendation is that rexecd is disabled. This service can be performed securely using OpenSSH. This entry starts the rexecd daemon when required. This daemon executes a command from a remote system once the connection has been authenticated. The exec service is used to execute a command sent from a remote server. The username and passwords are passed over the network in clear text and therefore insecurely. Unless required the rexecd daemon will be disabled. Audit: `lssrc -s inetd -l` must not list the service (count 0).
Cara pemeriksaan
Metode audit: Perintah shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'exec'); echo "$n"- Output yang diharapkan
0
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
In /etc/inetd.conf, comment out the exec entry: chsubserver -r inetd -C /etc/inetd.conf -d -v 'exec' -p 'tcp6' refresh -s inetd
Properti
- Sistem operasi
- Apa saja
- Tag
- aixservices
- Referensi
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.7 Ensure exec daemon is not in use
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
tmaegis scan --target aix