TMA-AIX-4.5.1

Ensure sockthresh is configured

SedangLevel 1Otomatisaix

Deskripsi

The sockthresh parameter value determines what percentage of the total memory allocated to networking, set via thewall, can be used for sockets. The sockthresh parameterwill be set to 60. This means that 60% of network memory can be used to service new socket connections, the remaining 40% is reserved for existing sockets. This ensures a quality of service for existing connections. Audit: `no -o sockthresh` must report 60.

Cara pemeriksaan

Metode audit: Perintah shell

shell

command -v no >/dev/null 2>&1 || exit 1; out=$(no -o sockthresh 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'

Output yang diharapkan: sockthresh=60

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

no -p -o sockthresh=60 (sets the running value and makes it persistent in /etc/tunables/nextboot)

Properti

Sistem operasi: Apa saja
Tag: aixhardening
Referensi: CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.1 Ensure sockthresh is configured

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target aix