Ensure sendmail version information is hidden

SrednjaNivo 1Automatskaaix

Opis

The recommendation is to change both the default sendmail greeting and HELP output to not display the sendmail version. The sendmail deamon has a history of security vulnerabilities. The recommendation is to change the default sendmail settings that display the sendmail version and other related information. Audit: SmtpGreetingMessage must be set without "Sendmail $b" and /etc/mail/helpfile must exist.

Kako se proverava

Metod provere: Komanda ljuske

shell

[ -r /etc/mail/sendmail.cf ] || exit 1; l=$(grep -i "^O SmtpGreetingMessage" /etc/mail/sendmail.cf); if [ -z "$l" ]; then echo "SmtpGreetingMessage not set"; else case "$l" in *"Sendmail \$b"*) echo "version disclosed: $l";; *) [ -e /etc/mail/helpfile ] && echo compliant || echo "sendmail helpfile missing";; esac; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Create a backup copy of /etc/mail/sendmail.cf: cp -p /etc/mail/sendmail.cf /etc/mail/sendmail.cf.pre_cis Edit: vi /etc/mail/sendmail.cf Replace: O SmtpGreetingMessage=$j Sendmail $b With: O SmtpGreetingMessage=mailerready Ensure Sendmail helpfile exists test -e /etc/mail/helpfile || touch /etc/mail/helpfile

Svojstva

Operativni sistemi: Bilo koji
Oznake: aixservices
Referenca: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.4.1 Ensure sendmail version information is hidden

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aix