The system must use an access control program.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-940 | GEN006580 | SV-38959r1_rule | EBRU-1 | Medium |
| Description |
|---|
| Access control programs (such as TCP_WRAPPERS) provide the ability to enhance system security posture. |
| STIG | Date |
|---|---|
| AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2018-09-18 |
Details
| Check Text ( C-28781r1_chk ) |
|---|
| Determine if TCP_WRAPPERS is being used. # grep tcpd /etc/inetd.conf If no services are listed, this is a finding. |
| Fix Text (F-32344r1_fix) |
|---|
| Edit /etc/inetd.conf and use tcpd to wrap services. Use SMIT to install TCP Wrappers from the AIX Expansion pack media as fileset netsec.options.tcpwrappers. |