TMAegis
aix için daha fazla kural

IBM AIX

TMA-AIX-4.6.2.2

Ensure ftpd login banner is configured

DüşükDüzey 1Otomatikaix

Açıklama

Set an ftpd login banner which displays the acceptable usage policy. The message in banner.msg is displayed for FTP logins. Banners display necessary warnings to users trying to gain unauthorized access to the system and are required for legal purposes. The recommendation is to set the banner as: "Authorized uses only. Audit: only evaluated when ftp is enabled in /etc/inetd.conf.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell
if grep -q "^ftp[[:blank:]]" /etc/inetd.conf 2>/dev/null; then command -v dspcat >/dev/null 2>&1 || exit 1; m=$(dspcat /usr/lib/nls/msg/en_US/ftpd.cat 1 9 2>/dev/null); case "$m" in *"Authorized uses only"*) echo compliant;; *) echo "ftpd banner: $m";; esac; else echo compliant; fi
Beklenen çıktı
compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Ensure that the bos.msg.en_US.net.tcp.client fileset is installed: lslpp -L "bos.msg.en_US.net.tcp.client" NOTE: If the fileset is not installed, install it from the AIX media or another software repository. The fileset should reflect the language used on the server. Once installed set the ftp AUP banner: dspcat -g /usr/lib/nls/msg/en_US/ftpd.cat > /tmp/ftpd.tmp sed "s/\"\%s FTP server (\%s) ready.\"/\"\%s Authorized uses only. All activity may be monitored and reported\"/" /tmp/ftpd.tmp > /tmp/ftpd.msg gencat /usr/lib/nls/msg/en_US/ftpd.cat /tmp/ftpd.msg rm /tmp/ftpd.tmp /tmp/ftpd.msg

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
aixaccounts
Referans
CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.2.2 Ensure ftpd login banner is configured

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell
tmaegis scan --target aix