STIGUI
V-215427CAT II — Medium severitySV-215427r1268251_rule

The AIX DHCP client must not send dynamic DNS updates.

Rule version AIX7-00-003132 · STIG v3 · 2026-08-31

Discussion

Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unless needed.

Check

If AIX does not use DHCP client, this is Not Applicable.

Determine if the system's DHCP client is configured to send dynamic DNS updates: # grep "^updateDNS" /etc/dhcpc.opt /etc/dhcpcd.ini

If any lines are returned, this is a finding.

Fix

Configure the system's DHCP client to not send dynamic DNS updates.

Remove or comment-out "updateDNS" lines from the "/etc/dhcpcd.ini" and "/etc/dhcpc.opt" files.

Identifiers

Group ID
V-215427
Group title
SRG-OS-000480-GPOS-00227
Rule ID
SV-215427r1268251_rule
Check ID
C-16625r294732_chk
Fix ID
F-16623r294733_fix