Detections
Analytics

AIX7-00-003105 - The rwalld daemon must be disabled on AIX.

Information

The rwalld service allows remote users to broadcast system wide messages. The service runs as root and should be disabled unless absolutely necessary to prevent attacks.

Solution

In "/etc/inetd.conf", comment out the "rwalld" entry by running command:
# chsubserver -r inetd -C /etc/inetd.conf -d -v 'rwalld' -p 'udp'

Restart inetd:
# refresh -s inetd

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-215406r958478_rule, STIG-ID|AIX7-00-003105, STIG-Legacy|SV-101491, STIG-Legacy|V-91393, Vuln-ID|V-215406

Plugin: Unix

Control ID: 206a199384504f345d0e0646ef1052c7cd589425c3c3caac369e29a061b641b4