Detections
Analytics

AIX7-00-003017 - AIX NFS server must be configured to restrict file system access to local hosts.

Information

The NFS access option limits user access to the specified level. This assists in protecting exported file systems. If access is not restricted, unauthorized hosts may be able to access the system's NFS exports.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Edit "/etc/exports" and add "ro" and/or "rw" options (as appropriate) specifying a list of hosts or networks which are permitted access.

Re-export the file systems:
# /usr/sbin/exportfs -a

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215330r991589_rule, STIG-ID|AIX7-00-003017, STIG-Legacy|SV-101741, STIG-Legacy|V-91643, Vuln-ID|V-215330

Plugin: Unix

Control ID: 7c2828311aeb84f49e57a7ae1a31c5a90d77dd3af41506d5ae8670429a3f63bd