Skip to content

III - Administrative Public

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000095-GPOS-00049

    Group
  • If SNMP is not required on AIX, the snmpmibd daemon must be disabled.

    The snmpmibd daemon is a dpi2 sub-agent which manages a number of MIB variables. If snmpd is not required, it is recommended that it is disabled.
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    Group
  • The aixmibd daemon must be disabled on AIX.

    The aixmibd daemon is a dpi2 sub-agent which manages a number of MIB variables. To prevent attacks this daemon should not be enabled unless there is no alternative.
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    Group
  • The ndpd-host daemon must be disabled on AIX.

    This is the Neighbor Discovery Protocol (NDP) daemon, required in IPv6. The ndpd-host is the NDP daemon for the server. Unless the server utilizes IPv6, this is not required and should be disabled...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    Group
  • The ndpd-router must be disabled on AIX.

    This manages the Neighbor Discovery Protocol (NDP) for non-kernel activities, required in IPv6. The ndpd-router manages NDP for non-kernel activities. Unless the server utilizes IPv6, this is not ...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    Group
  • The daytime daemon must be disabled on AIX.

    The daytime service provides the current date and time to other servers on a network. This daytime service is a defunct time service, typically used for testing purposes only. The service should b...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules