The ndpd-host daemon must be disabled on AIX.
An XCCDF Rule
Description
<VulnDiscussion>This is the Neighbor Discovery Protocol (NDP) daemon, required in IPv6. The ndpd-host is the NDP daemon for the server. Unless the server utilizes IPv6, this is not required and should be disabled to prevent attacks.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215367r958478_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
In "/etc/rc.tcpip", comment out the "ndpd-host" entry by running command:
# chrctcp -d ndpd-host