TMA-AIX-4.3.4.29
Ensure tftpd daemon is not in use
高等級 1自動化aix
說明
This entry starts the tftp service when required. The tftp service allows remote systems to download or upload files to the tftp server without any authentication. It is therefore a service that should not run, unless needed. Audit: `lssrc -s inetd -l` must not list the service (count 0).
檢查方式
稽核方法: Shell 指令
shell
command -v lssrc >/dev/null 2>&1 || exit 1; n=$(lssrc -s inetd -l 2>/dev/null | grep -c '[[:blank:]]tftp'); echo "$n"- 預期輸出
0
修補方式
修補方法: 操作指南或基礎設施修補檔
Use chsubserver to disable this service in /etc/inetd.conf: chsubserver -r inetd -C /etc/inetd.conf -d -v 'tftp' -p 'udp6' refresh -s inetd
屬性
- 作業系統
- 不限
- 標籤
- aixservices
- 參考資料
- CIS IBM AIX 7 Benchmark v1.2.0 - 4.3.4.29 Ensure tftpd daemon is not in use
檢查此主機
請在您有權稽核的機器上執行此指令。掃描為唯讀操作。
shell
tmaegis scan --target aix