Detections
Analytics

4.3.2.5 Ensure gated is not in use

Information

The gated daemon provides gateway routing functions for protocols such as RIP, OSPF and BGP.

Unless a system is specifically set up to act as a network router, it is recommended that the gated fileset be removed to reduce the potential attack surface.

Solution

Run the following command to remove the software:

# /usr/sbin/installp -u bos.net.tcp.gated bos.net.tcp.server

- OR -

- IF - the bos.net.tcp.gated fileset is required as a dependency:

Run the following script to stop and disable gated

#!/usr/bin/ksh
DAEMONS="gated"
for l_daemon in $DAEMONS;
do
 /usr/sbin/chrctcp -d $l_daemon
 /usr/bin/stopsrc -s $l_daemon
done

See Also

https://workbench.cisecurity.org/benchmarks/22751

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CCI|CCI-000381, CSCv7|9.2, Rule-ID|SV-215358r958478_rule, Vuln-ID|V-215358

Plugin: Unix

Control ID: f13f81a948a58966f7a8d6db05b7ce973b1abed4e916c000e37f4e836daac480