Ensure SSH client and server packages are installed on AIX 7.2

中等級 1自動化aix

說明

SSH client and server packages can be automatically installed as part of the base system to provide secure network login capabilities. On AIX 7.3 these packages are automatically installed on all systems, but on AIX 7.2 are an option. The telnet protocol is insecure and unencrypted. The use of an unencrypted transmission medium could allow an unauthorized user to steal credentials. The ssh protocol provides an encrypted session and stronger security. Audit: checks that openssh.base.server and openssh.base.client are installed (lslpp -L).

檢查方式

稽核方法: Shell 指令

shell

command -v lslpp >/dev/null 2>&1 || exit 1; r=compliant; for p in openssh.base.server openssh.base.client; do lslpp -L $p >/dev/null 2>&1 || r="$p not installed"; done; echo "$r"

預期輸出: compliant

修補方式

修補方法: 操作指南或基礎設施修補檔

Install the OpenSSH filesets from the AIX base media or IBM Web Download Pack: installp -acgXYd <media> openssh.base.client openssh.base.server

屬性

作業系統: 不限
標籤: aixssh
參考資料: CIS IBM AIX 7 Benchmark v1.2.0 - 1.3.3.2 Ensure SSH client and server packages are installed on AIX 7.2

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target aix