TMA-AIX-4.3.4.21

Ensure rstatd daemon is not in use

보통레벨 1자동aix

설명

This entry starts the rstatd daemon. This service is used to provide kernel statistics and other monitorable parameters such as CPU usage, system uptime, network usage etc. This service should be disabled if not explicitly required by performance monitoring software to collect statistics. The rstatd service is used to provide kernel statistics and other monitorable parameters pertinent to the system such as: CPU usage, system uptime, network usage etc. An attacker may use this information in a DoS attack. Audit: `lssrc -s inetd -l` must not list the service (count 0).

점검 방법

감사 방식: 셸 명령

shell

command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'rstatd'); echo "$n"

예상 출력: 0

조치 방법

조치 방식: 가이드 또는 인프라 패치

In /etc/inetd.conf, comment out the rstatd entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'rstatd' -p udp lssrc -s inetd && refresh -s inetd

속성

운영 체제: 모두
태그: aixservices
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.21 Ensure rstatd daemon is not in use

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix