Detections
Analytics
GEN003810 - The portmap or rpcbind service must not be running unless needed.
Information
The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap or rpcbind services are used by a variety of services using Remote Procedure Calls (RPCs).NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Disable the portmap service from auto starting by commenting out portmap from /etc/rc.tcpip.# vi /etc/rc.tcpip
Shutdown the portmap service.
# ps -ef | grep portmap
# kill <pid of portmap>
See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: AWARENESS AND TRAINING
References: 800-53|AT-4b., CAT|II, CCI|CCI-001336, Group-ID|V-22429, Rule-ID|SV-38874r1_rule, STIG-ID|GEN003810, Vuln-ID|V-22429
Plugin: Unix
Control ID: 6793bd1446f0a9157920d5c5323de910d6e6a78103ab9bd3398c1fb2f51b8662