STIGUI
V-215359CAT II — Medium severitySV-215359r958478_rule

If AIX server is not functioning as a multicast router, the mrouted daemon must be disabled.

Rule version AIX7-00-003053 · STIG v3 · 2026-08-31

Discussion

This daemon is an implementation of the multicast routing protocol.

To prevent remote attacks this daemon should not be enabled unless there is no alternative.

Check

From the command prompt, execute the following command: # grep "^start[[:blank:]]/usr/sbin/mrouted" /etc/rc.tcpip

If there is any output from the command, this is a finding.

Fix

In "/etc/rc.tcpip", comment out the "mrouted" entry by running command: # chrctcp -d mrouted

Identifiers

Group ID
V-215359
Group title
SRG-OS-000095-GPOS-00049
Rule ID
SV-215359r958478_rule
Check ID
C-16557r294528_chk
Fix ID
F-16555r294529_fix