If AIX server is not functioning as a network router, the routed daemon must be disabled.

The routed daemon manages the network routing tables in the kernel.

To prevent attacks this daemon should not be enabled unless there is no alternative.

From the command prompt, execute the following command: # grep "^start[[:blank:]]/usr/sbin/routed" /etc/rc.tcpip

If there is any output from the command, this is a finding.

In "/etc/rc.tcpip", comment out the "routed" entry by running command: # chrctcp -d routed