IBM AIX
TMA-AIX-1.3.3.2
Ensure SSH client and server packages are installed on AIX 7.2
Descrição
SSH client and server packages can be automatically installed as part of the base system to provide secure network login capabilities. On AIX 7.3 these packages are automatically installed on all systems, but on AIX 7.2 are an option. The telnet protocol is insecure and unencrypted. The use of an unencrypted transmission medium could allow an unauthorized user to steal credentials. The ssh protocol provides an encrypted session and stronger security. Audit: checks that openssh.base.server and openssh.base.client are installed (lslpp -L).
Como é verificado
Método de auditoria: Comando shell
command -v lslpp >/dev/null 2>&1 || exit 1; r=compliant; for p in openssh.base.server openssh.base.client; do lslpp -L $p >/dev/null 2>&1 || r="$p not installed"; done; echo "$r"- Saída esperada
compliant
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Install the OpenSSH filesets from the AIX base media or IBM Web Download Pack: installp -acgXYd <media> openssh.base.client openssh.base.server
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- aixssh
- Referência
- CIS IBM AIX 7 Benchmark v1.2.0 - 1.3.3.2 Ensure SSH client and server packages are installed on AIX 7.2
Verificar este host
Execute isto em uma máquina que você tenha permissão para auditar. A varredura é somente leitura.
tmaegis scan --target aix