GEN000000-AIX00060 - A baseline of AIX files with the TCB bit set must be checked weekly.

Information

If a baseline of files with the TCB bit set is not kept and checked weekly, the system could be compromised without the knowledge of any authority.

Solution

Add tcbck command as a weekly cronjob with the output sent to the SA.

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Audit Name: DISA STIG AIX 6.1 v1r14

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-7(1), CAT|II, CCI|CCI-001298, Group-ID|V-4287, Rule-ID|SV-4287r2_rule, STIG-ID|GEN000000-AIX00060, Vuln-ID|V-4287

Plugin: Unix

Control ID: ccb38bf584224edae0cc0f61f8c351fac6f02395c7aca434ed73db0a4fddcb76