Skip to content

III - Administrative Public

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000095-GPOS-00049

    Group
  • The instsrv daemon must be disabled on AIX.

    The instsrv service is part of the Network Installation Tools, used for servicing servers running AIX 3.2. This service should be disabled to prevent attacks.
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    Group
  • The echo daemon must be disabled on AIX.

    The echo service can be used in Denial of Service or SMURF attacks. It can also be used by someone else to get through a firewall or start a data storm. The echo service is unnecessary and it incre...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    Group
  • The Internet Network News (INN) server must be disabled on AIX.

    Internet Network News (INN) servers access Usenet newsfeeds and store newsgroup articles. INN servers use the Network News Transfer Protocol (NNTP) to transfer information from the Usenet to the se...
    Rule Medium Severity
  • SRG-OS-000096-GPOS-00050

    Group
  • If Stream Control Transmission Protocol (SCTP) must be disabled on AIX.

    The Stream Control Transmission Protocol (SCTP) is an IETF-standardized transport layer protocol. This protocol is not yet widely used. Binding this protocol to the network stack increases the atta...
    Rule Medium Severity
  • SRG-OS-000096-GPOS-00050

    Group
  • The Reliable Datagram Sockets (RDS) protocol must be disabled on AIX.

    The Reliable Datagram Sockets (RDS) protocol is a relatively new protocol developed by Oracle for communication between the nodes of a cluster. Binding this protocol to the network stack increases ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules