STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX must allow admins to send a message to a user who logged in currently.

DISA Rule

SV-215401r508663_rule

Vulnerability Number

V-215401

Group Title

SRG-OS-000312-GPOS-00122

Rule Version

AIX7-00-003099

Severity

CAT II

CCI(s)

• CCI-002165 - The information system enforces organization-defined discretionary access control policies over defined subjects and objects.

Weight

10

Fix Recommendation

Install the "bos.rte.misc_cmds" package from AIX DVD Volume 1 using the following command (assuming that the DVD device is /dev/cd0):
# installp -aXYgd /dev/cd0 -e /tmp/install.log bos.rte.misc_cmds

Check Contents

Run following command to see if the "write" command is installed:

# ls -al /usr/bin/write

If "/usr/bin/write" does not exist, this is a finding.

Vulnerability Number

V-215401

Documentable

False

Rule Version

AIX7-00-003099

Severity Override Guidance

Run following command to see if the "write" command is installed:

# ls -al /usr/bin/write

If "/usr/bin/write" does not exist, this is a finding.

Check Content Reference

M

Target Key

4012

Comments