Check: AIX7-00-003060
IBM AIX 7.x STIG:
AIX7-00-003060
(in versions v2 r9 through v1 r1)
Title
If SNMP is not required on AIX, the snmpmibd daemon must be disabled. (Cat II impact)
Discussion
The snmpmibd daemon is a dpi2 sub-agent which manages a number of MIB variables. If snmpd is not required, it is recommended that it is disabled.
Check Content
From the command prompt, execute the following command: # grep "^start[[:blank:]]/usr/sbin/snmpmibd" /etc/rc.tcpip If there is any output from the command, this is a finding.
Fix Text
In "/etc/rc.tcpip", comment out the "snmpmibd" entry by running command: # chrctcp -d snmpmibd
Additional Identifiers
Rule ID: SV-215365r508663_rule
Vulnerability ID: V-215365
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-7 |
Least Functionality |