UCF STIG Viewer Logo

The ttdbserver daemon must be disabled on AIX.


Overview

Finding ID Version Rule ID IA Controls Severity
V-215371 AIX7-00-003066 SV-215371r508663_rule Medium
Description
The ttdbserver service is the tool-talk database service for CDE. This service runs as root and should be disabled. Unless required the ttdbserver service will be disabled to prevent attacks.
STIG Date
IBM AIX 7.x Security Technical Implementation Guide 2022-06-06

Details

Check Text ( C-16569r294564_chk )
From the command prompt, execute the following command:
# grep "^#ttdbserver[[:blank:]]" /etc/inetd.conf

If there is any output from the command, this is a finding.
Fix Text (F-16567r294565_fix)
In "/etc/inetd.conf", comment out the "ttdbserver" entry by running command:
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'ttdbserver' -p 'sunrpc_tcp'

Restart inetd:
# refresh -s inetd