Detections
Analytics

AIX7-00-002117 - AIX must turn off X11 forwarding for the SSH daemon.

Information

X11 forwarding over SSH allows for the secure remote execution of X11-based applications. This feature can increase the attack surface of an SSH connection and should not be enabled unless needed.

Solution

Edit the "/etc/sshd/sshd_config" file to add the following line and save the change:
X11Forwarding no

Restart the SSH daemon:
# stopsrc -s sshd
# startsrc -s sshd

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215300r991589_rule, STIG-ID|AIX7-00-002117, STIG-Legacy|SV-101829, STIG-Legacy|V-91731, Vuln-ID|V-215300

Plugin: Unix

Control ID: 31d7fa9775363350208b1627ce24347f85af0b5b16011c73b6fd8e1ff8ecef11