UCF STIG Viewer Logo

The system must not use removable media as the boot loader.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4247 GEN008640 SV-38837r1_rule ECSC-1 High
Description
Malicious users with removable boot media can gain access to a system configured to use removable media as the boot loader.
STIG Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2014-10-03

Details

Check Text ( C-37099r1_chk )
Check the servers boot lists for the normal, service, both, or prevboot modes.

# bootlist -m -o
Ensure hdisk{x} is the only devices listed. If boot devices, such as cd{x}, fd{x}. rmt{x}, ent{x} are used, this is a finding.
Fix Text (F-32369r1_fix)
Configure the system to use a bootloader installed on fixed media.
# bootlist -m normal hdisk0
# bootlist -m service hdisk0