Ensure comsat daemon is not in use

보통레벨 1자동aix

설명

This entry starts the comsat service. The comsat daemon receives messages on a datagram port associated with the biff service specification. The recommendation is to leave this service disabled. The comsat daemon is the server that receives reports of incoming mail and notifies users if they have enabled this service with the biff command. Started by the inetd daemon, the comsat daemon is not meant to be used at the command line. Audit: `lssrc -s inetd -l` must not list the service (count 0).

점검 방법

감사 방식: 셸 명령

shell

command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'comsat'); echo "$n"

예상 출력: 0

조치 방법

조치 방식: 가이드 또는 인프라 패치

In /etc/inetd.conf, comment out the comsat entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'comsat' -p udp lssrc -s inetd && refresh -s inetd

속성

운영 체제: 모두
태그: aixservices
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.3 Ensure comsat daemon is not in use

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix