The system must not have the comsat service active.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-29503 | GEN009190 | SV-38707r1_rule | ECSC-1 | Medium |
| Description |
|---|
| The comsat daemon notifies users on incoming email. This is an unnecessary service and is vulnerable to a flood attack. Running unnecessary services increases the attack vector of the system. |
| STIG | Date |
|---|---|
| AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2018-09-18 |
Details
| Check Text ( C-37803r1_chk ) |
|---|
| Check the /etc/inetd.conf file for active comsat service. #grep comsat /etc/inetd.conf | grep -v \# If the comsat service is enabled, this is a finding. |
| Fix Text (F-33061r1_fix) |
|---|
| Edit /etc/inetd.conf and comment out comsat service line. Restart the inetd service. # refresh -s inetd |