The time daemon must be disabled on AIX.
An XCCDF Rule
Description
<VulnDiscussion>This service can be used to synchronize system clocks. The time service is an obsolete process used to synchronize system clocks at boot time. This has been superseded by NTP, which should be used if time synchronization is necessary. Unless required the time service must be disabled.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215373r958478_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
In "/etc/inetd.conf", comment out the "time" entries by running commands:
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'time' -p 'udp'
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'time' -p 'tcp'
Restart inetd:
# refresh -s inetd