TMA-AIX-4.3.4.29
Ensure tftpd daemon is not in use
VisokaNivo 1Automatskaaix
Opis
This entry starts the tftp service when required. The tftp service allows remote systems to download or upload files to the tftp server without any authentication. It is therefore a service that should not run, unless needed. Audit: `lssrc -s inetd -l` must not list the service (count 0).
Kako se proverava
Metod provere: Komanda ljuske
shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c '[[:blank:]]tftp'); echo "$n"- Očekivani izlaz
0
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Use chsubserver to disable this service in /etc/inetd.conf: chsubserver -r inetd -C /etc/inetd.conf -d -v 'tftp' -p 'udp6' refresh -s inetd
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- aixservices
- Referenca
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.29 Ensure tftpd daemon is not in use
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target aix