The ndpd-router must be disabled on AIX.
An XCCDF Rule
Description
<VulnDiscussion>This manages the Neighbor Discovery Protocol (NDP) for non-kernel activities, required in IPv6. The ndpd-router manages NDP for non-kernel activities. Unless the server utilizes IPv6, this is not required and should be disabled to prevent attacks.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-215368r508663_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
In "/etc/rc.tcpip", comment out the "ndpd-router" entry by running command:
# chrctcp -d ndpd-router