TMA-AIX-4.2.2
Ensure NIS server services are not in use
说明
A Network Information Service (NIS) server is a host that provides configuration information to other hosts on a network. NIS servers store tables of information about users, groups, and more. They also maintain a set of maps and run the ypserv daemon, which processes requests from clients for information in those maps. Audit: passes when bos.net.nis.server is not installed; if NIS server is approved, review /var/yp/securenets manually.
检查方式
审计方法: Shell 命令
command -v lslpp >/dev/null 2>&1 || exit 1; lslpp -L >/dev/null 2>&1 || exit 1; out=$( { lslpp -L | grep -i 'bos.net.nis.server' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20- 预期输出
compliant
修复方式
修复方法: 操作指南或基础设施补丁
Ensure that all of the NIS daemons are inactive: stopsrc -g yp De-install the NIS server software: installp -u bos.net.nis.server - OR - - IF - the NIS server package is required as a dependency, or NIS must be used in the environment, and is approved by local site policy: Ensure that all of the NIS daemons are inactive: stopsrc -g yp De-install the NIS server software: installp -u bos.net.nis.server Create and secure the /var/yp/securenets file (if it does not already exist): touch /var/yp/securenets chmod u=rw,go= /var/yp/securenets chown root:system /var/yp/securenets Edit the file: vi /var/yp/securenets Add the allowed subnets: 255.255.255.0 128.311.10.0 NOTE: The format of the file is netmask netaddr as shown in the example above. Explicitly define all valid network subnets (one entry per line). Stop and start NIS to implement the configuration changes: stopsrc -g yp startsrc -g yp
属性
- 操作系统
- 任意
- 标签
- aixservices
- 参考
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.2.2 Ensure NIS server services are not in use
检查本机
请在您有权审计的机器上运行此命令。扫描为只读操作。
tmaegis scan --target aix