Skip to content
ATO Pathways
  Log In

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If sendmail is not required on AIX, the sendmail service must be disabled.

    &lt;VulnDiscussion&gt;The sendmail service has many historical vulnerabilities and, where possible, should be disabled. If the system is not requir...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If SNMP is not required on AIX, the snmpd service must be disabled.

    &lt;VulnDiscussion&gt;The snmpd daemon is used by many 3rd party applications to monitor the health of the system. This allows remote monitoring of...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The AIX DHCP client must be disabled.

    &lt;VulnDiscussion&gt;The dhcpcd daemon receives address and configuration information from the DHCP server. DHCP relies on trusting the local netw...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If DHCP is not enabled in the network on AIX, the dhcprd daemon must be disabled.

    &lt;VulnDiscussion&gt;The dhcprd daemon listens for broadcast packets, receives them, and forwards them to the appropriate server. To prevent remo...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If IPv6 is not utilized on AIX server, the autoconf6 daemon must be disabled.

    &lt;VulnDiscussion&gt;"autoconf6" is used to automatically configure IPv6 interfaces at boot time. Running this service may allow other hosts on th...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If AIX server is not functioning as a network router, the gated daemon must be disabled.

    &lt;VulnDiscussion&gt;This daemon provides gateway routing functions for protocols such as RIP and SNMP. To prevent remote attacks this daemon sho...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If AIX server is not functioning as a multicast router, the mrouted daemon must be disabled.

    &lt;VulnDiscussion&gt;This daemon is an implementation of the multicast routing protocol. To prevent remote attacks this daemon should not be enab...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If AIX server is not functioning as a DNS server, the named daemon must be disabled.

    &lt;VulnDiscussion&gt;This is the server for the DNS protocol and controls domain name resolution for its clients. To prevent attacks this daemon ...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If AIX server is not functioning as a network router, the routed daemon must be disabled.

    &lt;VulnDiscussion&gt;The routed daemon manages the network routing tables in the kernel. To prevent attacks this daemon should not be enabled unl...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • If rwhod is not required on AIX, the rwhod daemon must be disabled.

    &lt;VulnDiscussion&gt;This is the remote WHO service. To prevent remote attacks this daemon should not be enabled unless there is no alternative.&...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules