TMA-AIX-4.3.4.4
Ensure daytime daemon is not in use
Opis
The service should be disabled as it can leave the system vulnerable to DoS ping attacks. This entry starts the daytime service when required. This provides the current date and time to other servers on a network. This daytime service is a defunct time service, typically used for testing purposes only. Audit: `lssrc -s inetd -l` must not list the service (count 0).
Kako se proverava
Metod provere: Komanda ljuske
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'daytime'); echo "$n"- Očekivani izlaz
0
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
In /etc/inetd.conf, comment out the daytime entry and refresh the inetd process: chsubserver -r inetd -C /etc/inetd.conf -d -v 'daytime' -p tcp chsubserver -r inetd -C /etc/inetd.conf -d -v 'daytime' -p udp lssrc -s inetd && refresh -s inetd
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- aixservices
- Referenca
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.4 Ensure daytime daemon is not in use
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target aix