TMA-AIX-4.3.3.1

Ensure autoconf6 is not in use

보통레벨 1자동aix

설명

This entry starts autoconf6 on system startup. This is to automatically configure IPv6 interfaces at boot time. autoconf6 is used to automatically configure IPv6 interfaces at boot time. Running this service may allow other hosts on the same physical subnet to connect via IPv6, even when the network does not support it. Audit: the autoconf6 start line in /etc/rc.tcpip must be commented out and the autoconf6 subsystem must not be active.

점검 방법

감사 방식: 셸 명령

shell

command -v lssrc >/dev/null 2>&1 || exit 1; [ -r /etc/rc.tcpip ] || exit 1; out=$( { grep -E "^[[:blank:]]*start[[:blank:]]+/usr/(sbin|lib)/autoconf6([[:blank:]]|$)" /etc/rc.tcpip; lssrc -s autoconf6 | awk 'NR>1 && $NF=="active"' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

In /etc/rc.tcpip, comment out the autoconf6 entry: chrctcp -d autoconf6

속성

운영 체제: 모두
태그: aixhardening
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.3.1 Ensure autoconf6 is not in use

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix