3.1.11 /etc/security/user - minloweralpha

3.1.12 /etc/security/user - minupperalpha

3.1.14 /etc/security/user - minspecialchar

3.1.15 /etc/security/login.cfg - pwd_algorithm

3.2.2 /etc/security/login.cfg - logininterval

3.2.3 /etc/security/login.cfg - logindisable

3.2.4 /etc/security/login.cfg - loginreenable

3.2.5 /etc/security/login.cfg - logintimeout

CSCv6|16.4

3.2.6 /etc/security/login.cfg - logindelay

CSCv6|16.7

CSCv6|9.1

3.3.53 /etc/inetd.conf - permissions and ownership

CSCv6|3.1

3.7.3 Miscellaneous Enhancements - /etc/ftpusers

3.7.4 Miscellaneous Enhancements - login herald

3.7.5 Miscellaneous Enhancements - guest account removal

3.7.6 Miscellaneous Enhancements - crontab permissions

4.2.2 Configuring SSH - disabling direct root access

4.2.3 Configuring SSH - server protocol 2

4.2.4 Configuring SSH - client protocol 2

4.2.5 Configuring SSH - banner configuration - ssh_banner

4.2.5 Configuring SSH - banner configuration - sshd_config

4.2.6 Configuring SSH - ignore .shosts and .rhosts

4.2.7 Configuring SSH - disable null passwords

4.2.9 Configuring SSH - set privilege separation

4.2.12 Configuring SSH - set LogLevel to INFO

4.2.13 Configuring SSH - set MaxAuthTries to 4 or Less

4.2.14 Configuring SSH - set Idle Timeout Interval for User Login - ClientAliveCountMax

4.2.14 Configuring SSH - set Idle Timeout Interval for User Login - ClientAliveInterval

4.2.15 Configuring SSH - restrict Cipher list

4.2.16 Configuring SSH - ignore user-provided environment variables

4.2.17 Configuring SSH - limit access via SSH

4.2.18 Configuring SSH - sshd_config permissions lockdown

4.2.19 Configuring SSH - ssh_config permissions lockdown

4.3.1 /etc/mail/sendmail.cf - SmtpGreetingMessage

4.3.2 /etc/mail/sendmail.cf - permissions and ownership

4.3.3 /var/spool/mqueue - permissions and ownership

4.4.3 CDE - sgid/suid binary lockdown - /usr/dt/bin/dtaction

4.4.3 CDE - sgid/suid binary lockdown - /usr/dt/bin/dtappgather

4.4.3 CDE - sgid/suid binary lockdown - /usr/dt/bin/dtprintinfo

4.4.3 CDE - sgid/suid binary lockdown - /usr/dt/bin/dtsession

4.4.5 CDE - screensaver lock - dtsession*lockTimeout

CSCv6|16.5

4.4.5 CDE - screensaver lock - dtsession*saverTimeout

4.4.6 CDE - login screen hostname masking - dtlogin.greeting.labelString

4.4.6 CDE - login screen hostname masking - dtlogin.greeting.persLabelString

4.4.7 CDE - /etc/dt/config/Xconfig permissions and ownership

4.4.8 CDE - /etc/dt/config/Xservers permissions and ownership - explicit definition

4.4.8 CDE - /etc/dt/config/Xservers permissions and ownership - permissions and ownership

4.4.9 CDE - /etc/dt/config/*/Xresources permissions and ownership

4.10.2 TCP Wrappers - creating a hosts.deny file - ALL denied

4.10.2 TCP Wrappers - creating a hosts.deny file - file exists

4.10.3 TCP Wrappers - creating a hosts.allow file - access defined

4.10.3 TCP Wrappers - creating a hosts.allow file - file exists

4.11.1 Permissions and Ownership - /etc/security

4.11.2 Permissions and Ownership - /etc/group

4.11.3 Permissions and Ownership - /etc/passwd

4.11.4 Permissions and Ownership - /etc/security/audit

4.11.5 Permissions and Ownership - /audit

4.11.6 Permissions and Ownership - /smit.log

4.11.7 Permissions and Ownership - /var/adm/cron/log

4.11.8 Permissions and Ownership - /var/spool/cron/crontabs - directory

4.11.8 Permissions and Ownership - /var/spool/cron/crontabs - files

4.11.9 Permissions and Ownership - /var/adm/cron/at.allow

4.11.10 Permissions and Ownership - /var/adm/cron/cron.allow

4.11.11 Permissions and Ownership - /etc/motd

4.11.12 Permissions and Ownership - /var/adm/ras

4.11.13 Permissions and Ownership - /var/ct/RMstart.log

4.11.14 Permissions and Ownership - /var/tmp/dpid2.log

4.11.15 Permissions and Ownership - /var/tmp/hostmibd.log

4.11.16 Permissions and Ownership - /var/tmp/snmpd.log

4.11.17 Permissions and Ownership - /var/adm/sa

4.11.18 Permissions and Ownership - home directory configuration files

4.11.19 Permissions and Ownership - home directory permissions - existing home directories

4.11.19 Permissions and Ownership - home directory permissions - new home directories

Detections

Analytics

Revision 1.36

Apr 26, 2021

Functional Update

Miscellaneous