Detections
Analytics
AIX7-00-002131 - AIX must implement a remote syslog server that is documented using site-defined procedures.
Information
If a remote log host is in use and it has not been justified and documented, sensitive information could be obtained by unauthorized users without the administrator's knowledge.Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000342-GPOS-00133, SRG-OS-000479-GPOS-00224
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Edit the /etc/syslog.conf file to include a documented and approved remote log host.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip
Item Details
Audit Name: DISA IBM AIX 7.x STIG v3r3
Category: AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
References: 800-53|AU-4(1), 800-53|CM-6b., CAT|II, CCI|CCI-000366, CCI|CCI-001851, Rule-ID|SV-215312r991589_rule, STIG-ID|AIX7-00-002131, STIG-Legacy|SV-101755, STIG-Legacy|V-91657, Vuln-ID|V-215312
Plugin: Unix
Control ID: 6af40eff6e3ed08e7854782e629819265c421a45f97a5dfb1bee3c571722fddc