Item Search

NameAudit NamePluginCategory
1.006 - Users with Administrative privilege are not documented or do not have separate accounts for administrative duties.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

2.005 - Systems must be at supported service packs (SP) or releases levels.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.027 - Printer share permissions are not configured as recommended.DISA Windows Vista STIG v6r41Windows

ACCESS CONTROL

3.028 - The built-in Windows password complexity policy must be enabled.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

3.062 - Anonymous SID/Name translation is allowed.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.063 - Unauthorized named pipes are accessible with anonymous credentials.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003950 - The hosts.lpd (or equivalent) file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004360 - The alias file must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004620 - The Sendmail server must have the debug feature disabled.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN004640 - The SMTP service must not have a uudecode alias active - '/etc/aliases uudecode alias does not exist'DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND INFORMATION INTEGRITY

GEN004840 - If the system is an anonymous FTP server, it must be isolated to the DMZ network.DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN004950 - The ftpusers file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005190 - The .Xauthority files must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005260 - X Window System connections not required must be disabled.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005280 - The system must not have the UUCP service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005360 - The snmpd.conf file must be owned by root - '/etc/snmpdv3.conf'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005365 - The snmpd.conf file must be group-owned by bin, sys, or system - '/etc/snmpd.conf'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005420 - The /etc/syslog.conf file must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005450 - The system must use a remote syslog server (log host).DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN005500 - The SSH daemon must be configured to only use the SSHv2 protocol.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005507 - SSH daemon must be configured to only use MACs employing FIPS 140-2 approved cryptographic hash algorithmsDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005510 - The SSH client must be configured to only use FIPS 140-2 approved ciphers.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005521 - The SSH daemon must restrict login ability to specific users and/or groups.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005523 - The SSH private host key files must have mode 0600 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005526 - The SSH daemon must not permit Kerberos authentication unless needed.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN005539 - The SSH daemon must not allow compression or must only allow compression after successful authentication.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN005560 - The system must be configured with a default gateway for IPv4 if the system uses IPv4, unless the system is a router.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN006060 - The system must not run Samba unless needed.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006140 - The /usr/lib/smb.conf file must have mode 0644 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006160 - The /var/private/smbpasswd file must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006300 - The /etc/news/nnrp.access (or equivalent) must have mode 0600 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006330 - The /etc/news/passwd.nntp file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006420 - NIS maps must be protected through hard-to-guess domain names.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN006480 - The system must have a host-based intrusion detection tool installed.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND INFORMATION INTEGRITY

GEN006565 - The system package management tool must be used to verify system software periodically.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

GEN006575 - The file integrity tool must use FIPS 140-2 approved cryptographic hashes for validating file contents.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND INFORMATION INTEGRITY

GEN007480 - The Reliable Datagram Sockets (RDS) protocol must be disabled or not installed unless required.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN007760 - Proxy Neighbor Discovery Protocol (NDP) must not be enabled on the system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN007940 - The system must not accept source-routed IPv6 packets.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN007960 - The ldd command must be disabled unless it protects against the execution of untrusted files.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN008420 - The system must use available memory address randomization techniques.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN008440 - Automated file system mounting tools must not be enabled unless needed.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN008460 - The system must have USB disabled unless needed - 'lsdev'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN008520 - The system must employ a local firewall.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN008640 - The system must not use removable media as the boot loader - 'both'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN009180 - The system must not have the tool-talk database server (ttdbserver) service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009220 - The system must not have the dtspc service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009230 - The system must not have the echo service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009260 - The system must not have the talk or ntalk services active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009330 - The system must not have the rstatd service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL