UCF STIG Viewer Logo

NFS servers must only accept NFS requests from privileged ports on client systems.


Overview

Finding ID Version Rule ID IA Controls Severity
V-927 GEN005720 SV-28441r1_rule ECSC-1 Medium
Description
If clients are not required to use privileged ports to get NFS services, then exported file systems may be in danger of mounting by malicious users and intruders that do not have access to privileged ports.
STIG Date
Draft AIX Security Technical Implementation Guide 2011-08-17

Details

Check Text ( C-28732r1_chk )
Perform the following command to determine if NFS port monitoring is enabled.
# nfso -o nfs_portmon
OR
# nfso -o portcheck
If the returned value is not '1', this is a finding.
Fix Text (F-25750r1_fix)
# nfso -p -o nfs_portmon=1
OR
# nfso -p -o portcheck=1