Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
NFS servers must only accept NFS requests from privileged ports on client systems.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-927 | GEN005720 | SV-28441r1_rule | ECSC-1 | Medium |
| Description |
|---|
| If clients are not required to use privileged ports to get NFS services, then exported file systems may be in danger of mounting by malicious users and intruders that do not have access to privileged ports. |
| STIG | Date |
|---|---|
| Draft AIX Security Technical Implementation Guide | 2011-08-17 |
Details
| Check Text ( C-28732r1_chk ) |
|---|
| Perform the following command to determine if NFS port monitoring is enabled. # nfso -o nfs_portmon OR # nfso -o portcheck If the returned value is not '1', this is a finding. |
| Fix Text (F-25750r1_fix) |
|---|
| # nfso -p -o nfs_portmon=1 OR # nfso -p -o portcheck=1 |