If AIX system does not act as a remote print server for other servers, the lpd daemon must be disabled.
Overview
Finding ID | Version | Rule ID | IA Controls | Severity |
V-215349 | AIX7-00-003043 | SV-215349r958478_rule | Medium |
Description |
The lpd daemon accepts remote print jobs from other systems. To prevent remote attacks this daemon should not be enabled unless there is no alternative. |
STIG | Date |
IBM AIX 7.x Security Technical Implementation Guide | 2024-08-16 |
Details
Check Text (C-16547r294498_chk) |
From the command prompt, execute the following command: # lsitab lpd If the command yields any output, this is a finding. |
Fix Text (F-16545r294499_fix) |
In "/etc/inittab", remove the "lpd" entry by running the following command: # rmitab lpd To request the init command to re-examine the "/etc/inittab" file, enter: # telinit q |