TMAegisBeta
Aturan lainnya untuk aix

IBM AIX

TMA-AIX-4.6.2.2

Ensure ftpd login banner is configured

RendahLevel 1Otomatisaix

Deskripsi

Set an ftpd login banner which displays the acceptable usage policy. The message in banner.msg is displayed for FTP logins. Banners display necessary warnings to users trying to gain unauthorized access to the system and are required for legal purposes. The recommendation is to set the banner as: "Authorized uses only. Audit: only evaluated when ftp is enabled in /etc/inetd.conf.

Cara pemeriksaan

Metode audit: Perintah shell

shell
if grep -q "^ftp[[:blank:]]" /etc/inetd.conf 2>/dev/null; then command -v dspcat >/dev/null 2>&1 || exit 1; m=$(dspcat /usr/lib/nls/msg/en_US/ftpd.cat 1 9 2>/dev/null); case "$m" in *"Authorized uses only"*) echo compliant;; *) echo "ftpd banner: $m";; esac; else echo compliant; fi
Output yang diharapkan
compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Ensure that the bos.msg.en_US.net.tcp.client fileset is installed: lslpp -L "bos.msg.en_US.net.tcp.client" NOTE: If the fileset is not installed, install it from the AIX media or another software repository. The fileset should reflect the language used on the server. Once installed set the ftp AUP banner: dspcat -g /usr/lib/nls/msg/en_US/ftpd.cat > /tmp/ftpd.tmp sed "s/\"\%s FTP server (\%s) ready.\"/\"\%s Authorized uses only. All activity may be monitored and reported\"/" /tmp/ftpd.tmp > /tmp/ftpd.msg gencat /usr/lib/nls/msg/en_US/ftpd.cat /tmp/ftpd.msg rm /tmp/ftpd.tmp /tmp/ftpd.msg

Properti

Sistem operasi
Apa saja
Tag
aixaccounts
Referensi
CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.2.2 Ensure ftpd login banner is configured

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell
tmaegis scan --target aix