TMA-AIX-4.3.4.28
Ensure telnetd daemon is not in use
Opis
The recommendation is that telnet is disabled and OpenSSH is used as a replacement mechanism. This entry starts the telnetd daemon when required. This provides a protocol for command line access from a remote machine. The telnet protocol passes username and password in clear text over the network in clear text and therefore insecurely. This telnet service is used to service remote user connections. Audit: `lssrc -s inetd -l` must not list the service (count 0).
Kako se proverava
Metod provere: Komanda ljuske
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'telnet'); echo "$n"- Očekivani izlaz
0
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
In /etc/inetd.conf, comment out the telnet entry: chsubserver -r inetd -C /etc/inetd.conf -d -v 'telnet' -p 'tcp6' refresh -s inetd
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- aixservices
- Referenca
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.28 Ensure telnetd daemon is not in use
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target aix