AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
#Power
#Operatingsystems
#Servers
 View Only

  • 1.  Security Hardening for AIX Server

    Posted 08/26/24 11:13 AM

    Do IBM have standard security hardening checklist on AIX Server that we can refer.

    Thanks 



    ------------------------------
    FAZIL MURAD
    ------------------------------


  • 2.  RE: Security Hardening for AIX Server

    Posted 08/26/24 11:26 AM

    IBM has a product PowerSC

    There was a discussion about the CIS standard last week

    Where is the CIS security benchmark scripts for AIX ? | AIX

    Ibm remove preview
    Where is the CIS security benchmark scripts for AIX ? | AIX
    Could anyone tell me about CIS security benchmark check scripts?My customer wants to get the CIS security check benchmark scripts for AIX, but I don' t know it
    View this on Ibm >



    ------------------------------
    Alexander Pettitt
    ------------------------------



  • 3.  RE: Security Hardening for AIX Server

    Posted 08/30/24 06:35 AM

    Checklist!!!   How very 1090's of you.

    AIX has the built-in command aixpert that applies 100's of system hardening rule for you.

    These have been created by the the IBM Security team. There is typically, improved rules with each AIX version - so update AIX to get the latest set.

    There are different profiles that you can apply for your industry.

    You can disable rules you don't like for example default is NFS is blocked but if you use that you can switch off the NFS rule.

    For a quick at my YouTube video for a quick start: https://youtu.be/L1MmuZOntxI?si=vhyZSDC1zHdav-BS

    If you have 100's of AIX's running you can use PowerSC (it costs money) to automatically apply the rules to lots of servers and check they are still applied (no sysadmin fiddling with the setting).

    I hope this helps.

    ps: the Video has been available since 2008 - How come you have not found it before now? :-)

    You could do worse than to check my other videos on Power hardware, AIX features and nmon/njmon.

    At https://www.youtube.com/@nigelargriffiths



    ------------------------------
    Nigel Griffiths - IBM retired
    London, UK
    @mr_nmon
    ------------------------------



  • 4.  RE: Security Hardening for AIX Server

    Posted 09/03/24 09:36 PM

    Thank You Nigel for the info and update. really appreciate it. 



    ------------------------------
    FAZIL MURAD
    ------------------------------

    Original Message


  • 5.  RE: Security Hardening for AIX Server

    Posted 09/02/24 03:16 AM

    IBM does indeed have a security checklist you can find here:  https://www.ibm.com/docs/en/aix/7.3?topic=security-checklist

    And Nigel above is correct, aixpert can indeed do this for you: https://www.ibm.com/docs/en/aix/7.3?topic=security-aix-expert

    Too bad about the timing, we're in residency right now creating a Security Catalog for IBM Power and it hasn't come out yet.  Watch out for it though. :)



    ------------------------------
    Carlo Castillo
    ------------------------------



  • 6.  RE: Security Hardening for AIX Server

    Posted 09/03/24 03:35 PM

    Either to use aixpert individually - or have a broad security profiles by IBM PowerSC ;-)



    ------------------------------
    Ahmed Mashhour
    ------------------------------



Related Content