Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-215188 | AIX7-00-001029 | SV-215188r508663_rule | Medium |
Description |
---|
All systems are vulnerable if terminals are left logged in and unattended. Leaving system terminals unsecure poses a potential security hazard. If the interface is AIXwindows (CDE), use the xlock command to lock the sessions. |
STIG | Date |
---|---|
IBM AIX 7.x Security Technical Implementation Guide | 2023-08-23 |
Check Text ( C-16386r294015_chk ) |
---|
If AIX CDE (X11) is not used, this is Not Applicable. Check the system to determine if "X11.apps.clients" is installed: # lslpp -L X11.apps.clients If the "X11.apps.clients" fileset is not installed, this is a finding. Check if "xlock" command exists using the following command: # ls /usr/bin/X11/xlock The above command should display the following: /usr/bin/X11/xlock If the above command does not show that "/usr/bin/X11/xlock" exists, this is a finding. |
Fix Text (F-16384r294016_fix) |
---|
Install "X11.apps.clients" fileset from the AIX DVD Volume 1 using the following command (assuming that the DVD is mounted to/dev/cd0): # installp -aXYgd /dev/cd0 -e /tmp/install.log X11.apps.clients |