Ensure SSH client and server packages are installed on AIX 7.2

中级别 1自动化aix

说明

SSH client and server packages can be automatically installed as part of the base system to provide secure network login capabilities. On AIX 7.3 these packages are automatically installed on all systems, but on AIX 7.2 are an option. The telnet protocol is insecure and unencrypted. The use of an unencrypted transmission medium could allow an unauthorized user to steal credentials. The ssh protocol provides an encrypted session and stronger security. Audit: checks that openssh.base.server and openssh.base.client are installed (lslpp -L).

检查方式

审计方法: Shell 命令

shell

command -v lslpp >/dev/null 2>&1 || exit 1; r=compliant; for p in openssh.base.server openssh.base.client; do lslpp -L $p >/dev/null 2>&1 || r="$p not installed"; done; echo "$r"

预期输出: compliant

修复方式

修复方法: 操作指南或基础设施补丁

Install the OpenSSH filesets from the AIX base media or IBM Web Download Pack: installp -acgXYd <media> openssh.base.client openssh.base.server

属性

操作系统: 任意
标签: aixssh
参考: CIS IBM AIX 7 Benchmark v1.2.0 - 1.3.3.2 Ensure SSH client and server packages are installed on AIX 7.2

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target aix