Skip to content

I - Mission Critical Public

Rules and Groups employed by this XCCDF Profile

  • If NFS is not required on AIX, the NFS daemon must be disabled.

    The rcnfs entry starts the NFS daemons during system boot. NFS is a service with numerous historical vulnerabilities and should not be enabled unless there is no alternative. If NFS serving is req...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    Group
  • If sendmail is not required on AIX, the sendmail service must be disabled.

    The sendmail service has many historical vulnerabilities and, where possible, should be disabled. If the system is not required to operate as a mail server i.e. sending, receiving or processing e-m...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    Group
  • If SNMP is not required on AIX, the snmpd service must be disabled.

    The snmpd daemon is used by many 3rd party applications to monitor the health of the system. This allows remote monitoring of network and server configuration. To prevent remote attacks this daemo...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules