The AIX qdaemon must be disabled if local or remote printing is not required.
An XCCDF Rule
Description
<VulnDiscussion>The qdaemon program is the printing scheduling daemon that manages the submission of print jobs to the piobe service. To prevent remote attacks this daemon should not be enabled unless there is no alternative.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215348r508663_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
In "/etc/inittab", remove the "qdaemon" entry by running the following command:
# rmitab qdaemon
To request the init command to re-examine the "/etc/inittab" file, enter:
# telinit q