Check: AIX7-00-003069
IBM AIX 7.x STIG:
AIX7-00-003069
(in versions v3 r1 through v1 r1)
Title
The talk daemon must be disabled on AIX. (Cat II impact)
Discussion
This talk service is used to establish an interactive two-way communication link between two UNIX users. Unless required the talk service will be disabled to prevent attacks.
Check Content
From the command prompt, execute the following command: # grep "^talk[[:blank:]]" /etc/inetd.conf If there is any output from the command, this is a finding.
Fix Text
In "/etc/inetd.conf", comment out the "talkd" entry by running command: # chsubserver -r inetd -C /etc/inetd.conf -d -v 'talk' -p 'udp' Restart inetd: # refresh -s inetd
Additional Identifiers
Rule ID: SV-215374r958478_rule
Vulnerability ID: V-215374
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000381 |
Configure the system to provide only organization-defined mission essential capabilities. |
Controls
Number | Title |
---|---|
CM-7 |
Least Functionality |