The ndpd-router must be disabled on AIX.
An XCCDF Rule
Description
This manages the Neighbor Discovery Protocol (NDP) for non-kernel activities, required in IPv6. The ndpd-router manages NDP for non-kernel activities. Unless the server utilizes IPv6, this is not required and should be disabled to prevent attacks.
- ID
- SV-215368r958478_rule
- Version
- AIX7-00-003063
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
In "/etc/rc.tcpip", comment out the "ndpd-router" entry by running command:
# chrctcp -d ndpd-router