Check: AIX7-00-003037
IBM AIX 7.x STIG:
AIX7-00-003037
(in versions v2 r9 through v1 r1)
Title
The AIX hosts.lpd file must not contain a + character. (Cat II impact)
Discussion
Having the '+' character in the hosts.lpd (or equivalent) file allows all hosts to use local system print resources.
Check Content
Look for the presence of a print service configuration file by running the following commands: # find /etc -name hosts.lpd -print # find /etc -name Systems -print # find /etc -name printers.conf If none of the files are found, this is not applicable. Otherwise, examine the configuration file by running: # more <print service file> | grep "+" @+hamlet +lear @+prospero If any lines are found that contain only a "+" character, this is a finding.
Fix Text
Remove the "+" entries from the "hosts.lpd" (or equivalent) file.
Additional Identifiers
Rule ID: SV-215343r508663_rule
Vulnerability ID: V-215343
Group Title: SRG-OS-000480-GPOS-00227
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |