TMA-AIX-4.3.2.6

Ensure hostmibd is not in use

보통레벨 1자동aix

설명

The hostmibd daemon is a dpi2 sub-agent which manages a number of MIB variables which may be required if the server runs SNMP. The specific MIB variables which are managed by hostmibd are defined by RFC 2790. Details relating to these MIBS can be found in: https://www.ibm.com/docs/en/aix/7.2?topic=h-hostmibd-daemon Audit: the hostmibd start line in /etc/rc.tcpip must be commented out and the hostmibd subsystem must not be active.

점검 방법

감사 방식: 셸 명령

shell

command -v lssrc >/dev/null 2>&1 || exit 1; [ -r /etc/rc.tcpip ] || exit 1; out=$( { grep -E "^[[:blank:]]*start[[:blank:]]+/usr/(sbin|lib)/hostmibd([[:blank:]]|$)" /etc/rc.tcpip; lssrc -s hostmibd | awk 'NR>1 && $NF=="active"' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Run the following command to remove the software: # /usr/sbin/installp -u bos.net.tcp.snmpd bos.net.tcp.server - OR - - IF - the bos.net.tcp.snmpd fileset is required as a dependency: Run the following script to stop and disable hostmibd #!/usr/bin/ksh DAEMONS="hostmibd" for l_daemon in $DAEMONS; do /usr/sbin/chrctcp -d $l_daemon /usr/bin/stopsrc -s $l_daemon done

속성

운영 체제: 모두
태그: aixhardening
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.2.6 Ensure hostmibd is not in use

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix