Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-215427 | AIX7-00-003132 | SV-215427r508663_rule | Medium |
Description |
---|
Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unless needed. |
STIG | Date |
---|---|
IBM AIX 7.x Security Technical Implementation Guide | 2021-11-19 |
Check Text ( C-16625r294732_chk ) |
---|
If AIX does not use DHCP client, this is Not Applicable. Determine if the system's DHCP client is configured to send dynamic DNS updates: # grep "^updateDNS" /etc/dhcpc.opt /etc/dhcpcd.ini If any lines are returned, this is a finding. |
Fix Text (F-16623r294733_fix) |
---|
Configure the system's DHCP client to not send dynamic DNS updates. Remove or comment-out "updateDNS" lines from the "/etc/dhcpcd.ini" and "/etc/dhcpc.opt" files. |