IBM AIX
TMA-AIX-4.6.1.6
Ensure CDE remote GUI login is disabled
Opis
The XDMCP service allows remote systems to start local X login sessions. The XDMCP service should be disabled unless there is a requirement to allow remote X servers to start login sessions. If the ability to host remote X servers is not required, disable the service. Audit: SKIP when CDE has no /etc/dt/config/Xconfig.
Kako se proverava
Metod provere: Obrazac u datoteci
- Datoteka
/etc/dt/config/Xconfig- Obrazac
(?m)^Dtlogin\.requestPort:\s+0\s*$
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Copy /usr/dt/config/Xconfig to /etc/dt/config if it does not already exist: ls -l /etc/dt/config/Xconfig If the file does not exist, create it: mkdir -p /etc/dt/config cp /usr/dt/config/Xconfig /etc/dt/config Disable remote X sessions from being started: vi /etc/dt/config/Xconfig Replace: # Dtlogin.requestPort: 0 With: Dtlogin.requestPort: 0
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- aixaccounts
- Referenca
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.1.6 Ensure CDE remote GUI login is disabled
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target aix