GEN000000-AIX00040 - The securetcpip command must be used - /etc/security/config has been configured

Information

The AIX securetcpip command disables insecure network utilities, such as rcp, rlogin, rlogind, rsh, rshd, tftp, tftpd, and trpt/d. These services increase the attack surface of the system.

Solution

Ensure secure tcp/ip has been invoked before allowing operations on the system

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4(8), CAT|II, CCI|CCI-000032, Group-ID|V-4284, Rule-ID|SV-4284r2_rule, STIG-ID|GEN000000-AIX00040, Vuln-ID|V-4284

Plugin: Unix

Control ID: 898eaeb8d296273b0ac6fb42b887af81c273822f6da400fd02d7087bc21da50e