CIS IBM AIX 7 v1.0.0 L2

This audit file has been deprecated and will be removed in a future update.

Name: CIS IBM AIX 7 v1.0.0 L2

Updated: 9/12/2025

Authority: CIS

Plugin: Unix

Revision: 1.2

Estimated Item Count: 25

Description	Categories
2.1.1 Ensure Trusted Execution Path is enabled
2.1.3 Ensure Allowlist violations are enabled
2.1.4 Ensure Trusted Execution (TE) policies are locked
2.3 Ensure regular scans for unauthorized applications
3.4 Ensure there are no system 'default group' writable files (objects)
4.2.5 Ensure all entries in /etc/hosts.equiv are removed
4.2.6 Ensure that host based authentication files are not present
4.3.2.9 Ensure mrouted is not in use
4.4.1.5 Ensure NFS exports use allow lists
4.4.1.7 Ensure secure RPC authentication is enabled
4.4.2.1 Ensure File System Level encryption is enabled
4.7.3.15 Ensure sshd PermitRootLogin is disabled
5.2.2 Ensure minimum password age is configured
6.1.1 Ensure sudo is installed
6.1.2 Ensure sudo logging is active
6.1.3 Ensure sudo commands use pty
6.2.1 Ensure at is restricted to authorized users
6.2.3 Ensure crontab is restricted authorized users
7.1.1 Ensure /audit filesystem has been created and configured
7.1.2 Ensure Audit configuration defines audit classes
7.1.3 Ensure Audit creates audit processing commands
7.1.4 Ensure Audit bin(ary) audit event collection is configured
7.2.2 Ensure syslog is configured to send logs to a remote log host
7.2.3 Ensure syslog is not configured to receive logs from a remote client
CIS_IBM_AIX_7_v1.0.0_L2.audit from CIS IBM AIX 7 Benchmark v1.0.0