Detections
Analytics

4.3.1.6 Ensure snapp is not installed

Information

snapp provides a perl-based interface to do the initial network configuration of an IBM RISC System/6000, from a Palm Pilot, via RS232C.

Systems running as logical partitions will not have access to an RS232C port, network configuration is performed either via NIM or through the virtual terminal provided by the Hardware Management Console. The snapp service is therefore not required and should be removed to reduce the attack surface of the system.

Solution

Remove the software

installp -u bos.net.snapp

See Also

https://workbench.cisecurity.org/benchmarks/22751

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: d22c9db0bc091039b8d15371cda7c028ea4884fd5694cd5963a9001c21031109