Detections
Analytics
AIX7-00-003131 - AIX package management tool must be used daily to verify system software.
Information
Verification using the system package management tool can be used to determine that system software has not been tampered with. This requirement is not applicable to systems not using package management tools.Solution
Add a job to the root crontab invoking the following system package management tool to verify the integrity of installed packages and email the result to root user.Run the following command to add the cron job:
# crontab -e
Within crontab command, add the following daily job to the cron table, then save the change:
0 23 * * * /usr/bin/lppchk -c > /tmp/111 2>&1; sendmail root < /tmp/111
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215426r991589_rule, STIG-ID|AIX7-00-003131, STIG-Legacy|SV-101809, STIG-Legacy|V-91711, Vuln-ID|V-215426
Plugin: Unix
Control ID: 3d983edfddd3e587c89c49f2363c3d9d028b6a32c19409f144518a7bc0e43eaa