IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

If AIX server is not functioning as a network router, the gated daemon must be disabled.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

If AIX server is not functioning as a network router, the gated daemon must be disabled.

Description

Discussion Text

This daemon provides gateway routing functions for protocols such as RIP and SNMP.

To prevent remote attacks this daemon should not be enabled unless there is no alternative.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215358

Rule

SV-215358r958478_rule

Severity

medium

Rule Version

AIX7-00-003052

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the command prompt, execute the following command: 
# grep "^start[[:blank:]]/usr/sbin/gated" /etc/rc.tcpip

If there is any output from the command, this is a finding.

Implementation Procedure

Fix Text

In "/etc/rc.tcpip", comment out the "gated" entry by running command: 
# chrctcp -d gated

STIG check 184 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215357If IPv6 is not utilized on AIX server, the autoconf6 daemon must be disabled.Next · V-215359 →If AIX server is not functioning as a multicast router, the mrouted daemon must be disabled.