STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX must be able to control the ability of remote login for users.

DISA Rule

SV-215233r508663_rule

Vulnerability Number

V-215233

Group Title

SRG-OS-000297-GPOS-00115

Rule Version

AIX7-00-001137

Severity

CAT I

CCI(s)

• CCI-002314 - The information system controls remote access methods.

Weight

10

Fix Recommendation

From the command prompt, run the following command to set "rlogin=false" for all users (user_name) who are not authorized to login remotely:
# chsec -f /etc/security/user -s [user_name] -a rlogin=false

Check Contents

For users who are authorized to remote login through SSH, etc., this is Not Applicable.

Ask ISSO/SA to obtain a list of users who are not authorized to remotely log in to AIX system.

From the command prompt, run the following command to check if remote login is disabled for all individual users who are not authorized to remotely login to AIX:
# lsuser -a rlogin ALL
root rlogin=true
daemon rlogin=true
bin rlogin=true
sys rlogin=true
adm rlogin=true

If "rlogin=true" for any user who should not login remotely, this is a finding.

Vulnerability Number

V-215233

Documentable

False

Rule Version

AIX7-00-001137

Severity Override Guidance

For users who are authorized to remote login through SSH, etc., this is Not Applicable.

Ask ISSO/SA to obtain a list of users who are not authorized to remotely log in to AIX system.

From the command prompt, run the following command to check if remote login is disabled for all individual users who are not authorized to remotely login to AIX:
# lsuser -a rlogin ALL
root rlogin=true
daemon rlogin=true
bin rlogin=true
sys rlogin=true
adm rlogin=true

If "rlogin=true" for any user who should not login remotely, this is a finding.

Check Content Reference

M

Target Key

4012

Comments