Detections
Analytics

AIX7-00-003087 - The Internet Network News (INN) server must be disabled on AIX.

Information

Internet Network News (INN) servers access Usenet newsfeeds and store newsgroup articles. INN servers use the Network News Transfer Protocol (NNTP) to transfer information from the Usenet to the server and from the server to authorized remote hosts.

If this function is necessary to support a valid mission requirement, its use must be authorized and approved in the system accreditation package.

Solution

To stop "innd" or "nntpd" from running, use the following commands:
# stopsrc -s innd
# stopsrc -s nntpd

Some versions of "innd" and "nntpd" need the following commands to stop them:
# kill -1 [innd_pid]
# kill -1 [nntpd_pid]

To remove "innd" and 'nntpd" from SRC, run the following commands:
# rmssys -s innd
# rmssys -s nntpd

To stop running "innd" and "nntpd" from "/etc/inetd.conf", comment out the "innd" and "nntpd" lines in "/etc/inetd.conf", then refresh the "inetd":
# refresh -s inetd

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-215392r958478_rule, STIG-ID|AIX7-00-003087, STIG-Legacy|SV-101513, STIG-Legacy|V-91415, Vuln-ID|V-215392

Plugin: Unix

Control ID: 5fdafebbea4d1854d8491201e88221b229ebe1feb84843a2c7af972674187253