STIGUI
V-215351CAT II — Medium severitySV-215351r958478_rule

If there are no X11 clients that require CDE on AIX, the dt service must be disabled.

Rule version AIX7-00-003045 · STIG v3 · 2026-08-31

Discussion

This entry executes the CDE startup script which starts the AIX Common Desktop Environment.

To prevent attacks this daemon should not be enabled unless there is no alternative.

Check

From the command prompt, execute the following command: # lsitab dt

If the command yields any output, this is a finding.

Fix

In "/etc/inittab", remove the "dt" entry by running the following command: # rmitab dt

To request the init command to re-examine the "/etc/inittab" file, enter: # telinit q

Identifiers

Group ID
V-215351
Group title
SRG-OS-000095-GPOS-00049
Rule ID
SV-215351r958478_rule
Check ID
C-16549r294504_chk
Fix ID
F-16547r294505_fix