3.1.1.1 All accounts must have a hashed password

800-53|IA-5(1)

CSCv7|4.4

800-53|AC-2

CSCv7|16.6

800-53|AC-7

800-53|AC-19

CSCv7|16.11

800-53|AC-2(3)

CSCv7|16.9

800-53|IA-5

CSCv7|4.6

800-53|CM-7

800-53|MA-4

3.1.3.10 Ensure System Accounts cannot access system using ftp.

3.2.4 Adding authorized users in at.allow

800-53|AC-6(2)

800-53|AC-6(5)

CSCv7|4.3

3.2.6 Adding authorised users in cron.allow

800-53|CM-6

CSCv7|9.2

3.3.2.1 Disable ntalk/talk/write - writesrv

3.3.5.2 NFS - enable both nosuid and nodev options on NFS client mounts - nodev

800-53|AC-3

800-53|AC-5

800-53|AC-6

800-53|MP-2

CSCv7|14.6

3.3.5.2 NFS - enable both nosuid and nodev options on NFS client mounts - nosuid

3.3.5.5 NFS - no root access via NFS exports

800-53|CM-6b.

800-53|SC-7(9)

800-53|SC-7

800-53|SC-7(12)

3.4.12 nfs_use_reserved_ports - nfs_use_reserved_ports

3.4.12 nfs_use_reserved_ports - portcheck

3.5.2 Ensure default user umask is 027 or more restrictive

3.5.3 General Permissions Management - world writable directories

3.5.4 General Permissions Management - world writable files

3.5.5 Ensure no unowned files or directories exist

3.6.1.5 CDE - sgid/suid binary lockdown - /usr/dt/bin/dtaction

3.6.1.5 CDE - sgid/suid binary lockdown - /usr/dt/bin/dtappgather

3.6.1.5 CDE - sgid/suid binary lockdown - /usr/dt/bin/dtprintinfo

3.6.1.5 CDE - sgid/suid binary lockdown - /usr/dt/bin/dtsession

3.6.1.7 CDE - screensaver lock - dtsession*lockTimeout

800-53|AC-2(5)

800-53|AC-11

800-53|AC-11(1)

800-53|AC-12

3.6.1.7 CDE - screensaver lock - dtsession*saverTimeout

CIS IBM AIX 7.1 L1 v2.0.0

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Jan 4, 2023 Miscellaneous Metadata updated. Variables updated.
Revision 1.1 Dec 7, 2022 Miscellaneous Metadata updated.

CIS IBM AIX 7.1 L1 v2.0.0 Download File

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

CIS IBM AIX 7.1 L1 v2.0.0