← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215427

CAT II (Medium)

The AIX DHCP client must not send dynamic DNS updates.

Rule ID

SV-215427r991589_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-000366

Discussion

Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unless needed.

Check Content

If AIX does not use DHCP client, this is Not Applicable.

Determine if the system's DHCP client is configured to send dynamic DNS updates: 
# grep "^updateDNS" /etc/dhcpc.opt /etc/dhcpcd.ini 

If any lines are returned, this is a finding.

Fix Text

Configure the system's DHCP client to not send dynamic DNS updates. 

Remove or comment-out "updateDNS" lines from the "/etc/dhcpcd.ini" and "/etc/dhcpc.opt" files.