Detections
Analytics
GEN000020 - The system must require authentication upon booting into single-user and maintenance modes.
Information
If the system does not require a valid root password before it boots into single-user or maintenance mode, anyone who invokes single-user or maintenance mode is granted privileged access to all files on the system.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Assign a root account password for any bootable partition.See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: ACCESS CONTROL
References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-27039r1_rule, STIG-ID|GEN000020, Vuln-ID|V-756
Plugin: Unix
Control ID: b2a101359db5dd71605e45d6c4d1f119917461bbecee923f5816b003f0bc91b1