Ensure icmpaddressmask is disabled

SrednjaNivo 1Automatskaaix

Opis

The icmpaddressmask parameter determines whether the system responds to an ICMP address mask ping. The icmpaddressmask parameter will be set to 0, This means that the system will not respond to ICMP address mask request pings. By default, when this is enabled the system is susceptible to source routing attacks. Audit: `no -o icmpaddressmask` must report 0.

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v no >/dev/null 2>&1 || exit 1; out=$(no -o icmpaddressmask 2>/dev/null) || exit 1; printf '%s\n' "$out" | sed 's/[[:blank:]]*=[[:blank:]]*/=/'

Očekivani izlaz: icmpaddressmask=0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

no -p -o icmpaddressmask=0 (sets the running value and makes it persistent in /etc/tunables/nextboot)

Svojstva

Operativni sistemi: Bilo koji
Oznake: aixhardening
Referenca: CIS IBM AIX 7 Benchmark v1.2.0 - 4.5.5 Ensure icmpaddressmask is disabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aix