Ensure dtlogin service is not available

SedangLevel 1Otomatisaix

Deskripsi

Do not start CDE automatically on system boot. As the benchmark is intended for use on logical partitions which will not have a graphical console, CDE should not be started automatically to reduce the attack surface of the system. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

Cara pemeriksaan

Metode audit: Perintah shell

shell

command -v lsitab >/dev/null 2>&1 || exit 1; out=$( { lsitab dt; lsitab dt_nogb ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Disable CDE start up: /usr/dt/bin/dtconfig -d End any current instances: /usr/dt/bin/dtconfig -kill NOTE: If CDE is not installed the command will not be found

Properti

Sistem operasi: Apa saja
Tag: aixaccounts
Referensi: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.1.3 Ensure dtlogin service is not available

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target aix