STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

The inetd.conf file on AIX must be owned by root and system group.

DISA Rule

SV-215269r508663_rule

Vulnerability Number

V-215269

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

AIX7-00-002077

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Change the "mode-bit" and the ownership of "/etc/inetd.conf":
# chmod 644 /etc/inetd.conf
# chown root:system /etc/inetd.conf

Check Contents

Check the ownership of "/etc/inetd.conf":
# ls -l /etc/inetd.conf | awk '{print $1 " " $3 " " $4 " " $9}'

The above command should yield the following output:
-rw-r--r-- root system /etc/inetd.conf

If it does not, this is a finding.

Vulnerability Number

V-215269

Documentable

False

Rule Version

AIX7-00-002077

Severity Override Guidance

Check the ownership of "/etc/inetd.conf":
# ls -l /etc/inetd.conf | awk '{print $1 " " $3 " " $4 " " $9}'

The above command should yield the following output:
-rw-r--r-- root system /etc/inetd.conf

If it does not, this is a finding.

Check Content Reference

M

Target Key

4012

Comments