The inetd.conf file on AIX must be group owned by the "system" group.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-245564 | AIX7-00-002092 | SV-245564r991589_rule | CCI-000366 | medium |
| Description | ||||
| Failure to give ownership of sensitive files or utilities to system groups may provide unauthorized users with the potential to access sensitive information or change the system configuration which could weaken the system's security posture. | ||||
| STIG | Date | |||
| IBM AIX 7.x Security Technical Implementation Guide | 2024-08-16 | |||
Details
Check Text (C-245564r991589_chk)
Check the group ownership of "/etc/inetd.conf":
# ls -al /etc/inetd.conf
The above command should yield the following output:
-rw-r----- root system /etc/inetd.conf
If the file is not group owned by system, this is a finding.
Fix Text (F-48798r755132_fix)
Change the group ownership of "/etc/inetd.conf":
# chgrp system /etc/inetd.conf