Detections
Analytics

4.3.1.7 Ensure NIM master is not installed

Information

The NIM master provides services to support network based installation, patching and automation against managed AIX client systems.

The fileset bos.sysmgt.nim.master is not installed by default IBM installation processes.

Only system(s) specifically designated and additionally hardened to safely perform the service NIM master should have this fileset installed.

Solution

Remove the software

installp -u bos.sysmgt.nim.master bos.sysmgt.nim.spot

Impact:

If system is intended to act as a NIM Master, removal of this package will prevent the system from acting as a NIM Master and performing package updates and installs.

Note: A NIM master should be properly documented with the exceptions needed to enable this service.

See Also

https://workbench.cisecurity.org/benchmarks/22751

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 2b208073c7e27a8ba26a1f76baf7cc116479de168390c82219adbecfed04d879