Detections
Analytics

AIX7-00-001124 - AIX root passwords must never be passed over a network in clear text form.

Information

Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords are not encrypted, they can be plainly read (i.e., clear text) and easily compromised.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

If OpenSSH server is not installed, install it from the from AIX DVD Volume 1 using the following command (assuming that the DVD device is /dev/cd0):
# installp -aXYgd /dev/cd0 -e /tmp/install.log openssh.base.server

Start SSH server if it is not started:
# startsrc -s sshd

Enable SSH on the system and use it for all remote connections used to attain root access.

Disable direct root remote login:
# chsec -f /etc/security/user -s root -a rlogin=false

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(c), CAT|I, CCI|CCI-000197, Rule-ID|SV-215221r987796_rule, STIG-ID|AIX7-00-001124, STIG-Legacy|SV-101391, STIG-Legacy|V-91293, Vuln-ID|V-215221

Plugin: Unix

Control ID: 500c81bef54056000804ae88c64e4d14cbd30c299db5def182924de871c8af37