UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The AIX DHCP client must not send dynamic DNS updates.


Overview

Finding ID Version Rule ID IA Controls Severity
V-91715 AIX7-00-003132 SV-101813r1_rule Medium
Description
Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unless needed.
STIG Date
IBM AIX 7.x Security Technical Implementation Guide 2019-04-29

Details

Check Text ( C-90869r1_chk )
If AIX does not use DHCP client, this is Not Applicable.

Determine if the system's DHCP client is configured to send dynamic DNS updates:
# grep "^updateDNS" /etc/dhcpc.opt /etc/dhcpcd.ini

If any lines are returned, this is a finding.
Fix Text (F-97913r1_fix)
Configure the system's DHCP client to not send dynamic DNS updates.

Remove or comment-out "updateDNS" lines from the "/etc/dhcpcd.ini" and "/etc/dhcpc.opt" files.