The AIX DHCP client must be disabled.
An XCCDF Rule
Description
The dhcpcd daemon receives address and configuration information from the DHCP server. DHCP relies on trusting the local network. If the local network is not trusted, then it should not be used. To prevent remote attacks this daemon should not be enabled unless there is no alternative. Satisfies: SRG-OS-000095-GPOS-00049, SRG-OS-000480-GPOS-00227
- ID
- SV-215355r958478_rule
- Version
- AIX7-00-003049
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Disable the system's DHCP client.
In "/etc/rc.tcpip", comment out the "dhcpcd" entry by running command:
# chrctcp -d dhcpcd