AIX7-00-003132 - The AIX DHCP client must not send dynamic DNS updates.

Information

Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unless needed.

Solution

Configure the system's DHCP client to not send dynamic DNS updates.

Remove or comment-out "updateDNS" lines from the "/etc/dhcpcd.ini" and "/etc/dhcpc.opt" files.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215427r991589_rule, STIG-ID|AIX7-00-003132, STIG-Legacy|SV-101813, STIG-Legacy|V-91715, Vuln-ID|V-215427

Plugin: Unix

Control ID: cd15aac5c2eacf5ddab2d64882c3c008e9d580f5c0144ed00c03ebc95179ce60