Check: AIX7-00-003069
IBM AIX 7.x STIG:
AIX7-00-003069
(in versions v2 r9 through v1 r1)
Title
The talk daemon must be disabled on AIX. (Cat II impact)
Discussion
This talk service is used to establish an interactive two-way communication link between two UNIX users. Unless required the talk service will be disabled to prevent attacks.
Check Content
From the command prompt, execute the following command: # grep "^talk[[:blank:]]" /etc/inetd.conf If there is any output from the command, this is a finding.
Fix Text
In "/etc/inetd.conf", comment out the "talkd" entry by running command: # chsubserver -r inetd -C /etc/inetd.conf -d -v 'talk' -p 'udp' Restart inetd: # refresh -s inetd
Additional Identifiers
Rule ID: SV-215374r508663_rule
Vulnerability ID: V-215374
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Number | Title |
---|---|
CM-7 |
Least Functionality |