GEN000000-AIX00060 - A baseline of AIX files with the TCB bit set must be checked weekly.

Information

If a baseline of files with the TCB bit set is not kept and checked weekly, the system could be compromised without the knowledge of any authority.

Solution

Add tcbck command as a weekly cronjob with the output sent to the SA.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Audit Name: DISA AIX 5.3 STIG v1r2

Category: ACCESS CONTROL

References: 800-53|AC-3(3), CAT|II, CCI|CCI-001298, Rule-ID|SV-4287r2_rule, STIG-ID|GEN000000-AIX00060, Vuln-ID|V-4287

Plugin: Unix

Control ID: 4785287b525754903ce5225cbceb78fc0230b6c030737f254f77aa4ede7801b3