UCF STIG Viewer Logo

If there are no X11 clients that require CDE on AIX, the dt service must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-215351 AIX7-00-003045 SV-215351r508663_rule Medium
Description
This entry executes the CDE startup script which starts the AIX Common Desktop Environment. To prevent attacks this daemon should not be enabled unless there is no alternative.
STIG Date
IBM AIX 7.x Security Technical Implementation Guide 2022-06-06

Details

Check Text ( C-16549r294504_chk )
From the command prompt, execute the following command:
# lsitab dt

If the command yields any output, this is a finding.
Fix Text (F-16547r294505_fix)
In "/etc/inittab", remove the "dt" entry by running the following command:
# rmitab dt

To request the init command to re-examine the "/etc/inittab" file, enter:
# telinit q