IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

If IPv6 is not utilized on AIX server, the autoconf6 daemon must be disabled.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

If IPv6 is not utilized on AIX server, the autoconf6 daemon must be disabled.

Description

Discussion Text

"autoconf6" is used to automatically configure IPv6 interfaces at boot time. Running this service may allow other hosts on the same physical subnet to connect via IPv6, even when the network does not support it. Disable this unless you use IPv6 on the server.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215357

Rule

SV-215357r958478_rule

Severity

medium

Rule Version

AIX7-00-003051

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the command prompt, execute the following command: 
# grep "^start[[:blank:]]/usr/sbin/autoconf6" /etc/rc.tcpip

If there is any output from the command, this is a finding.

Implementation Procedure

Fix Text

In "/etc/rc.tcpip", comment out the "autoconf6" entry by running command: 
# chrctcp -d autoconf6

STIG check 183 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215356If DHCP is not enabled in the network on AIX, the dhcprd daemon must be disabled.Next · V-215358 →If AIX server is not functioning as a network router, the gated daemon must be disabled.