Ensure exec daemon is not in use

SrednjaNivo 1Automatskaaix

Opis

The recommendation is that rexecd is disabled. This service can be performed securely using OpenSSH. This entry starts the rexecd daemon when required. This daemon executes a command from a remote system once the connection has been authenticated. The exec service is used to execute a command sent from a remote server. The username and passwords are passed over the network in clear text and therefore insecurely. Unless required the rexecd daemon will be disabled. Audit: `lssrc -s inetd -l` must not list the service (count 0).

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'exec'); echo "$n"

Očekivani izlaz: 0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

In /etc/inetd.conf, comment out the exec entry: chsubserver -r inetd -C /etc/inetd.conf -d -v 'exec' -p 'tcp6' refresh -s inetd

Svojstva

Operativni sistemi: Bilo koji
Oznake: aixservices
Referenca: CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.7 Ensure exec daemon is not in use

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aix