Ensure sendmail version information is hidden

OrtaDüzey 1Otomatikaix

Açıklama

The recommendation is to change both the default sendmail greeting and HELP output to not display the sendmail version. The sendmail deamon has a history of security vulnerabilities. The recommendation is to change the default sendmail settings that display the sendmail version and other related information. Audit: SmtpGreetingMessage must be set without "Sendmail $b" and /etc/mail/helpfile must exist.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

[ -r /etc/mail/sendmail.cf ] || exit 1; l=$(grep -i "^O SmtpGreetingMessage" /etc/mail/sendmail.cf); if [ -z "$l" ]; then echo "SmtpGreetingMessage not set"; else case "$l" in *"Sendmail \$b"*) echo "version disclosed: $l";; *) [ -e /etc/mail/helpfile ] && echo compliant || echo "sendmail helpfile missing";; esac; fi

Beklenen çıktı: compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Create a backup copy of /etc/mail/sendmail.cf: cp -p /etc/mail/sendmail.cf /etc/mail/sendmail.cf.pre_cis Edit: vi /etc/mail/sendmail.cf Replace: O SmtpGreetingMessage=$j Sendmail $b With: O SmtpGreetingMessage=mailerready Ensure Sendmail helpfile exists test -e /etc/mail/helpfile || touch /etc/mail/helpfile

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: aixservices
Referans: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.4.1 Ensure sendmail version information is hidden

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target aix