IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

If AIX server is not functioning as a network router, the routed daemon must be disabled.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

If AIX server is not functioning as a network router, the routed daemon must be disabled.

Description

Discussion Text

The routed daemon manages the network routing tables in the kernel.

To prevent attacks this daemon should not be enabled unless there is no alternative.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215361

Rule

SV-215361r958478_rule

Severity

medium

Rule Version

AIX7-00-003055

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the command prompt, execute the following command: 
# grep "^start[[:blank:]]/usr/sbin/routed" /etc/rc.tcpip

If there is any output from the command, this is a finding.

Implementation Procedure

Fix Text

In "/etc/rc.tcpip", comment out the "routed" entry by running command: 
# chrctcp -d routed

STIG check 187 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215360If AIX server is not functioning as a DNS server, the named daemon must be disabled.Next · V-215362 →If rwhod is not required on AIX, the rwhod daemon must be disabled.