TMA-AIX-4.3.3.1
Ensure autoconf6 is not in use
OrtaDüzey 1Otomatikaix
Açıklama
This entry starts autoconf6 on system startup. This is to automatically configure IPv6 interfaces at boot time. autoconf6 is used to automatically configure IPv6 interfaces at boot time. Running this service may allow other hosts on the same physical subnet to connect via IPv6, even when the network does not support it. Audit: the autoconf6 start line in /etc/rc.tcpip must be commented out and the autoconf6 subsystem must not be active.
Nasıl denetlenir
Denetim yöntemi: Kabuk komutu
shell
command -v lssrc >/dev/null 2>&1 || exit 1; [ -r /etc/rc.tcpip ] || exit 1; out=$( { grep -E "^[[:blank:]]*start[[:blank:]]+/usr/(sbin|lib)/autoconf6([[:blank:]]|$)" /etc/rc.tcpip; lssrc -s autoconf6 | awk 'NR>1 && $NF=="active"' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20- Beklenen çıktı
compliant
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
In /etc/rc.tcpip, comment out the autoconf6 entry: chrctcp -d autoconf6
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- aixhardening
- Referans
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.3.1 Ensure autoconf6 is not in use
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
shell
tmaegis scan --target aix