Ensure Secure by Default is selected during the installation

보통레벨 1수동 검토aix

설명

Secure By Default (SbD) is the concept of installing a minimal set of software in a secure configuration. The AIX Secure by Default (SbD) installation option installs a lighter version of the TCP client and server filesets, that excludes vulnerable commands and files. Many legacy services send passwords over the network in clear text and as such their use id discouraged.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Verify the configuration described in CIS IBM AIX 7 Benchmark v1.2.0 section 1.3.4.1: Secure By Default (SbD) is the concept of installing a minimal set of software in a secure configuration. The AIX Secure by Default (SbD) installation option installs a lighter version of the TCP client and server filesets, that excludes vulnerable commands and files.

조치 방법

조치 방식: 가이드 또는 인프라 패치

The Secure by Default option can be found under option 3 of the Installation and Settings menu Installation and Settings Either type 0 and press Enter to install with current settings, or type the number of the setting you want to change and press Enter. 1 System Settings: Method of Installation.............New and Complete Overwrite Disk Where You Want to Install.....hdisk0 2 Primary Language Environment Settings (AFTER Install): Cultural Convention................English (United States) Language ..........................English (United States) Keyboard ..........................English (United States) Keyboard Type......................Default 3 Security Model.......................Default 4 More Options (Software install options) 5 Select Edition.......................standard >>> 0 Install with the current settings listed above. +----------------------------------------------------- 88 Help ? | WARNING: Base Operating System Installation will 99 Previous Menu | destroy or impair recovery of ALL data on the | destination disk hdisk0. >>> Choice [0]:

속성

운영 체제: 모두
태그: aixhardening
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 1.3.4.1 Ensure Secure by Default is selected during the installation