STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 1 hour ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215427

CAT II (Medium)

The AIX DHCP client must not send dynamic DNS updates.

Rule ID

SV-215427r991589_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-000366

Discussion

Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unless needed.

Check Content

If AIX does not use DHCP client, this is Not Applicable.

Determine if the system's DHCP client is configured to send dynamic DNS updates: 
# grep "^updateDNS" /etc/dhcpc.opt /etc/dhcpcd.ini 

If any lines are returned, this is a finding.

Fix Text

Configure the system's DHCP client to not send dynamic DNS updates. 

Remove or comment-out "updateDNS" lines from the "/etc/dhcpcd.ini" and "/etc/dhcpc.opt" files.