TMA-AIX-4.3.4.28
Ensure telnetd daemon is not in use
高等級 1自動化aix
說明
The recommendation is that telnet is disabled and OpenSSH is used as a replacement mechanism. This entry starts the telnetd daemon when required. This provides a protocol for command line access from a remote machine. The telnet protocol passes username and password in clear text over the network in clear text and therefore insecurely. This telnet service is used to service remote user connections. Audit: `lssrc -s inetd -l` must not list the service (count 0).
檢查方式
稽核方法: Shell 指令
shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c 'telnet'); echo "$n"- 預期輸出
0
修補方式
修補方法: 操作指南或基礎設施修補檔
In /etc/inetd.conf, comment out the telnet entry: chsubserver -r inetd -C /etc/inetd.conf -d -v 'telnet' -p 'tcp6' refresh -s inetd
屬性
- 作業系統
- 不限
- 標籤
- aixservices
- 參考資料
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.28 Ensure telnetd daemon is not in use
檢查此主機
請在您有權稽核的機器上執行此指令。掃描為唯讀操作。
shell
tmaegis scan --target aix