AIX Security Expert /etc/rc.tcpip Settings group

AIX® Security Expert comments out specific entries in /etc/rc.tcpip so that they do not start when the system boots.

The following table lists entries that are commented out in /etc/rc.tcpip so that they do not start when the system boots.

Table 1. AIX Security Expert /etc/rc.tcpip Settings
Action button name Description Value set by AIX Security Expert Undo
Disable mail client/Enable mail client Comments out or uncomments the following entry from /etc/rc.tcpip:
start /usr/lib/sendmail "$src_running"
High Level Security
Comment
Medium Level Security
No effect
Low Level Security
No effect
AIX Standard Settings
Uncomment
Yes
Disable routing daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/routed "$src_running" -q
High Level Security
Yes
Medium Level Security
No effect
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Disable mrouted daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/mrouted "$src_running"
High Level Security
Yes
Medium Level Security
No effect
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Disable timed daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/timed
High Level Security
Yes
Medium Level Security
Yes
Low Level Security
Yes
AIX Standard Settings
Yes
Yes
Disable rwhod daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/rwhod "$src_running"
High Level Security
Yes
Medium Level Security
No effect
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Disable print daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/lpd "$src_running"
High Level Security
Yes
Medium Level Security
No effect
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Disable SNMP daemon/Enable SNMP daemon Comments out or uncomments the following entry from /etc/rc.tcpip:
start /usr/sbin/snmpd "$src_running"
High Level Security
Comment
Medium Level Security
Comment
Low Level Security
Disables the SNMP daemon
AIX Standard Settings
Uncomment
Yes
Stop DHCP Agent Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/dhcprd "$src_running"
High Level Security
Yes
Medium Level Security
Yes
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Stop DHCP Server Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/dhcpsd "$src_running"
High Level Security
Yes
Medium Level Security
Yes
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Stop autoconf6 Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/autoconf6 “"
High Level Security
Yes
Medium Level Security
No effect
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Disable DNS daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/named "$src_running"
High Level Security
Yes
Medium Level Security
No effect
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Disable gated daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/gated "$src_running"
High Level Security
Yes
Medium Level Security
Yes
Low Level Security
Yes
AIX Standard Settings
Yes
Yes
Stop DHCP Client Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/dhcpd "$src_running"
High Level Security
Yes
Medium Level Security
Yes
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Disable DPID2 daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/dpid2 "$src_running"
High Level Security
Yes
Medium Level Security
No effect
Low Level Security
No effect
AIX Standard Settings
Yes
Yes
Disable NTP daemon Comments out the following entry from /etc/rc.tcpip:
start /usr/sbin/xntpd "$src_running"
High Level Security
Yes
Medium Level Security
Yes
Low Level Security
No effect
AIX Standard Settings
Yes
Yes