Ensure SNMP Server is not enabled

SedangLevel 1Otomatislinux

Deskripsi

The Simple Network Management Protocol (SNMP) server is used to listen for SNMP commands from an SNMP management system, execute the commands or collect the information and then send results back to the requesting system.

Cara pemeriksaan

Metode audit: Perintah shell

shell

alt0() { command -v systemctl >/dev/null 2>&1 || { echo "step1: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl is-enabled snmpd' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- disabled || { echo step1: missing disabled; return 1; }; command -v systemctl >/dev/null 2>&1 || { echo "step2: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl status snmpd' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Active: inactive (dead)' || { echo step2: missing 'Active: inactive (dead)'; return 1; }; }; if alt0; then echo compliant; fi

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Run the following command to disable snmpd: # systemctl disable snmpd

Properti

Sistem operasi: alinux-2
Tag: cis-convertedlinux
Referensi: CIS Aliyun Linux 2 Benchmark v1.0.0 ARCHIVE - 2.1.14

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target linux