TMA-AIX-4.5.1

Ensure sockthresh is configured

SrednjaNivo 1Automatskaaix

Opis

The sockthresh parameter value determines what percentage of the total memory allocated to networking, set via thewall, can be used for sockets. The sockthresh parameterwill be set to 60. This means that 60% of network memory can be used to service new socket connections, the remaining 40% is reserved for existing sockets. This ensures a quality of service for existing connections. Audit: `no -o sockthresh` must report 60.

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v no >/dev/null 2>&1 || exit 1; out=$(no -o sockthresh 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'

Očekivani izlaz: sockthresh=60

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

no -p -o sockthresh=60 (sets the running value and makes it persistent in /etc/tunables/nextboot)

Svojstva

Operativni sistemi: Bilo koji
Oznake: aixhardening
Referenca: CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.1 Ensure sockthresh is configured

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aix