4.1.1.7 cas_agent

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The /etc/inittab entry labeled cas_agent starts an agent that communicates with FSM and/or IBM Director. The agent is started by the SRC subsystem and is installed by the fileset cas.agent.

Rationale:

The products this agent communicates with are depreciated - no longer supported by IBM as POWER platform systems management software. While harmless when running the agent may trigger a security alert due to the way it initializes with FSM (System Director).

Solution

The following command will deinstall the cas.agent fileset and also any filesets installed that depend on cas.agent (e.g., if artex.base.agent is also installed):

lslpp -L cas.agent >/dev/null 2>&1 && installp -ug cas.agent

Default Value:

:on: if agent is installed.

See Also

https://workbench.cisecurity.org/benchmarks/7851