Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must not have the comsat service active.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-29503 | GEN009190 | SV-38707r1_rule | ECSC-1 | Medium |
| Description |
|---|
| The comsat daemon notifies users on incoming email. This is an unnecessary service and is vulnerable to a flood attack. Running unnecessary services increases the attack vector of the system. |
| STIG | Date |
|---|---|
| AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2017-12-08 |
Details
| Check Text ( C-37803r1_chk ) |
|---|
| Check the /etc/inetd.conf file for active comsat service. #grep comsat /etc/inetd.conf | grep -v \# If the comsat service is enabled, this is a finding. |
| Fix Text (F-33061r1_fix) |
|---|
| Edit /etc/inetd.conf and comment out comsat service line. Restart the inetd service. # refresh -s inetd |