TMA-AIX-4.5.1

Ensure sockthresh is configured

보통레벨 1자동aix

설명

The sockthresh parameter value determines what percentage of the total memory allocated to networking, set via thewall, can be used for sockets. The sockthresh parameterwill be set to 60. This means that 60% of network memory can be used to service new socket connections, the remaining 40% is reserved for existing sockets. This ensures a quality of service for existing connections. Audit: `no -o sockthresh` must report 60.

점검 방법

감사 방식: 셸 명령

shell

command -v no >/dev/null 2>&1 || exit 1; out=$(no -o sockthresh 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'

예상 출력: sockthresh=60

조치 방법

조치 방식: 가이드 또는 인프라 패치

no -p -o sockthresh=60 (sets the running value and makes it persistent in /etc/tunables/nextboot)

속성

운영 체제: 모두
태그: aixhardening
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.1 Ensure sockthresh is configured

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix