The ndpd-host daemon must be disabled on AIX.
An XCCDF Rule
Description
This is the Neighbor Discovery Protocol (NDP) daemon, required in IPv6. The ndpd-host is the NDP daemon for the server. Unless the server utilizes IPv6, this is not required and should be disabled to prevent attacks.
- ID
- SV-215367r958478_rule
- Version
- AIX7-00-003062
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
In "/etc/rc.tcpip", comment out the "ndpd-host" entry by running command:
# chrctcp -d ndpd-host