Detections
Analytics

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands.

Information

If the mesg -n or mesg n command is not placed into the system profile, messaging can be used to cause a Denial of Service attack.

Solution

Edit /etc/profile or another global initialization script and add the mesg -n command.

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Group-ID|V-825, Rule-ID|SV-38893r1_rule, STIG-ID|GEN001780, Vuln-ID|V-825

Plugin: Unix

Control ID: f7b5617d712d985903d103d6029f3aaf693705668f8ab5558491ce9c8d0b171e