Ensure SSH client and server packages are installed on AIX 7.2

보통레벨 1자동aix

설명

SSH client and server packages can be automatically installed as part of the base system to provide secure network login capabilities. On AIX 7.3 these packages are automatically installed on all systems, but on AIX 7.2 are an option. The telnet protocol is insecure and unencrypted. The use of an unencrypted transmission medium could allow an unauthorized user to steal credentials. The ssh protocol provides an encrypted session and stronger security. Audit: checks that openssh.base.server and openssh.base.client are installed (lslpp -L).

점검 방법

감사 방식: 셸 명령

shell

command -v lslpp >/dev/null 2>&1 || exit 1; r=compliant; for p in openssh.base.server openssh.base.client; do lslpp -L $p >/dev/null 2>&1 || r="$p not installed"; done; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Install the OpenSSH filesets from the AIX base media or IBM Web Download Pack: installp -acgXYd <media> openssh.base.client openssh.base.server

속성

운영 체제: 모두
태그: aixssh
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 1.3.3.2 Ensure SSH client and server packages are installed on AIX 7.2

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix