Ensure hostmibd is not in use

СредњаНиво 1Аутоматскаaix

Опис

The hostmibd daemon is a dpi2 sub-agent which manages a number of MIB variables which may be required if the server runs SNMP. The specific MIB variables which are managed by hostmibd are defined by RFC 2790. Details relating to these MIBS can be found in: https://www.ibm.com/docs/en/aix/7.2?topic=h-hostmibd-daemon Audit: the hostmibd start line in /etc/rc.tcpip must be commented out and the hostmibd subsystem must not be active.

Како се проверава

Метод провере: Команда љуске

shell

command -v lssrc >/dev/null 2>&1 || exit 1; [ -r /etc/rc.tcpip ] || exit 1; out=$( { grep -E "^[[:blank:]]*start[[:blank:]]+/usr/(sbin|lib)/hostmibd([[:blank:]]|$)" /etc/rc.tcpip; lssrc -s hostmibd | awk 'NR>1 && $NF=="active"' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Очекивани излаз: compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Run the following command to remove the software: # /usr/sbin/installp -u bos.net.tcp.snmpd bos.net.tcp.server - OR - - IF - the bos.net.tcp.snmpd fileset is required as a dependency: Run the following script to stop and disable hostmibd #!/usr/bin/ksh DAEMONS="hostmibd" for l_daemon in $DAEMONS; do /usr/sbin/chrctcp -d $l_daemon /usr/bin/stopsrc -s $l_daemon done

Својства

Оперативни системи: Било који
Ознаке: aixhardening
Референца: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.2.6 Ensure hostmibd is not in use

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target aix