TMA-AIX-4.3.4.7
Ensure exec daemon is not in use
Açıklama
The recommendation is that rexecd is disabled. This service can be performed securely using OpenSSH. This entry starts the rexecd daemon when required. This daemon executes a command from a remote system once the connection has been authenticated. The exec service is used to execute a command sent from a remote server. The username and passwords are passed over the network in clear text and therefore insecurely. Unless required the rexecd daemon will be disabled. Audit: `lssrc -s inetd -l` must not list the service (count 0).
Nasıl denetlenir
Denetim yöntemi: Kabuk komutu
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'exec'); echo "$n"- Beklenen çıktı
0
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
In /etc/inetd.conf, comment out the exec entry: chsubserver -r inetd -C /etc/inetd.conf -d -v 'exec' -p 'tcp6' refresh -s inetd
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- aixservices
- Referans
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.7 Ensure exec daemon is not in use
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
tmaegis scan --target aix