If SNMP is not required on AIX, the snmpd service must be disabled.
An XCCDF Rule
Description
<VulnDiscussion>The snmpd daemon is used by many 3rd party applications to monitor the health of the system. This allows remote monitoring of network and server configuration. To prevent remote attacks this daemon should not be enabled unless there is no alternative.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215354r508663_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
In "/etc/rc.tcpip", comment out the "snmpd" entry by running command:
# chrctcp -d snmpd