TMA-AIX-4.2.2
Ensure NIS server services are not in use
說明
A Network Information Service (NIS) server is a host that provides configuration information to other hosts on a network. NIS servers store tables of information about users, groups, and more. They also maintain a set of maps and run the ypserv daemon, which processes requests from clients for information in those maps. Audit: passes when bos.net.nis.server is not installed; if NIS server is approved, review /var/yp/securenets manually.
檢查方式
稽核方法: Shell 指令
command -v lslpp >/dev/null 2>&1 || exit 1; lslpp -L >/dev/null 2>&1 || exit 1; out=$( { lslpp -L | grep -i 'bos.net.nis.server' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20- 預期輸出
compliant
修補方式
修補方法: 操作指南或基礎設施修補檔
Ensure that all of the NIS daemons are inactive: stopsrc -g yp De-install the NIS server software: installp -u bos.net.nis.server - OR - - IF - the NIS server package is required as a dependency, or NIS must be used in the environment, and is approved by local site policy: Ensure that all of the NIS daemons are inactive: stopsrc -g yp De-install the NIS server software: installp -u bos.net.nis.server Create and secure the /var/yp/securenets file (if it does not already exist): touch /var/yp/securenets chmod u=rw,go= /var/yp/securenets chown root:system /var/yp/securenets Edit the file: vi /var/yp/securenets Add the allowed subnets: 255.255.255.0 128.311.10.0 NOTE: The format of the file is netmask netaddr as shown in the example above. Explicitly define all valid network subnets (one entry per line). Stop and start NIS to implement the configuration changes: stopsrc -g yp startsrc -g yp
屬性
- 作業系統
- 不限
- 標籤
- aixservices
- 參考資料
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.2.2 Ensure NIS server services are not in use
檢查此主機
請在您有權稽核的機器上執行此指令。掃描為唯讀操作。
tmaegis scan --target aix