Ensure Secure by Default is selected during the installation

MédiaNível 1Revisão manualaix

Descrição

Secure By Default (SbD) is the concept of installing a minimal set of software in a secure configuration. The AIX Secure by Default (SbD) installation option installs a lighter version of the TCP client and server filesets, that excludes vulnerable commands and files. Many legacy services send passwords over the network in clear text and as such their use id discouraged.

Como é verificado

Método de auditoria: Revisão manual

Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.

Verify the configuration described in CIS IBM AIX 7 Benchmark v1.2.0 section 1.3.4.1: Secure By Default (SbD) is the concept of installing a minimal set of software in a secure configuration. The AIX Secure by Default (SbD) installation option installs a lighter version of the TCP client and server filesets, that excludes vulnerable commands and files.

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

The Secure by Default option can be found under option 3 of the Installation and Settings menu Installation and Settings Either type 0 and press Enter to install with current settings, or type the number of the setting you want to change and press Enter. 1 System Settings: Method of Installation.............New and Complete Overwrite Disk Where You Want to Install.....hdisk0 2 Primary Language Environment Settings (AFTER Install): Cultural Convention................English (United States) Language ..........................English (United States) Keyboard ..........................English (United States) Keyboard Type......................Default 3 Security Model.......................Default 4 More Options (Software install options) 5 Select Edition.......................standard >>> 0 Install with the current settings listed above. +----------------------------------------------------- 88 Help ? | WARNING: Base Operating System Installation will 99 Previous Menu | destroy or impair recovery of ALL data on the | destination disk hdisk0. >>> Choice [0]:

Propriedades

Sistemas operacionais: Qualquer
Tags: aixhardening
Referência: CIS IBM AIX 7 Benchmark v1.2.0 - 1.3.4.1 Ensure Secure by Default is selected during the installation