IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

If AIX system does not act as a remote print server for other servers, the lpd daemon must be disabled.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

If AIX system does not act as a remote print server for other servers, the lpd daemon must be disabled.

Description

Discussion Text

The lpd daemon accepts remote print jobs from other systems.

To prevent remote attacks this daemon should not be enabled unless there is no alternative.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215349

Rule

SV-215349r958478_rule

Severity

medium

Rule Version

AIX7-00-003043

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the command prompt, execute the following command:
# lsitab lpd

If the command yields any output, this is a finding.

Implementation Procedure

Fix Text

In "/etc/inittab", remove the "lpd" entry by running the following command:
# rmitab lpd

To request the init command to re-examine the "/etc/inittab" file, enter: 
# telinit q

STIG check 175 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215348The AIX qdaemon must be disabled if local or remote printing is not required.Next · V-215350 →If AIX system does not support either local or remote printing, the piobe service must be disabled.