DISA STIGS Viewer

AIX must not run any routing protocol daemons unless the system is a router.

Overview

Finding ID Version Rule ID IA Controls Severity
V-215428 AIX7-00-003133 SV-215428r991589_rule   Medium
Description
Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this software is used when not required, system network information may be unnecessarily transmitted across the network.
STIG Date
IBM AIX 7.x Security Technical Implementation Guide 2024-08-16

Details

Check Text (C-16626r294735_chk)
Check for any running routing protocol daemons by running:
# ps -ef | egrep '(ospf|route|bgp|zebra|quagga|gate)'

If any routing protocol daemons are listed, this is a finding.
Fix Text (F-16624r294736_fix)
Kill any routing protocol daemons by running the following command:
# ps -ef |egrep '(ospf|route|bgp|zebra|quagga|gate)' | grep -v egrep | awk -F " " '{print $2}' | while read pid;do kill $pid;done