Item Search

NameAudit NamePluginCategory
GEN001240 - System files, programs, and directories must be group-owned by a system group - '/etc/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/usr/ucb/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001260 - System log files must have mode 0640 or less permissive - '/var/adm/*'DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND INFORMATION INTEGRITY

GEN001290 - All manual page files must not have extended ACLs - '/usr/share/man/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001300 - Library files must have mode 0755 or less permissive - '/usr/lib/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/usr/lib/netsvc/yp/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/var/yp/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/usr/lib/netsvc/yp/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/var/nis/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/var/nis/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001362 - The /etc/resolv.conf file must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001368 - The /etc/hosts file must have mode 0644 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001369 - The /etc/hosts file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001373 - The /etc/nsswitch.conf file must have mode 0644 or less permissive - Not ApplicableDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001392 - The /etc/group file must be group-owned by security, bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001410 - The /etc/security/passwd file must be group-owned by security, bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001475 - The /etc/group file must not contain any group password hashes.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001480 - All users' home directories must have mode 0750 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001560 - All files and directories contained in user's home directories must have mode 0750 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001605 - Run control scripts library search paths must contain only authorized paths.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001680 - All system start-up files must be group-owned by sys, bin, other, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/csh.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/csh.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001840 - All global initialization files executable search paths must contain only authorized paths - '/etc/csh.login'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001840 - All global initialization files executable search paths must contain only authorized paths - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001845 - Global initialization files library search paths must contain only authorized paths - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001850 - Global initialization files lists of preloaded libraries must contain only authorized paths - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001850 - Global initialization files lists of preloaded libraries must contain only authorized paths - '/etc/profile'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001850 - Global initialization files lists of preloaded libraries must contain only authorized paths - '/etc/security/.login'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001850 - Global initialization files lists of preloaded libraries must contain only authorized paths - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.exrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.dispatch'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.env'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001980 - The .shosts file must not contain a plus (+) without defining entries for NIS+ netgroups or LDAP - '~/.shosts'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001980 - The hosts.equiv file must not contain a plus (+) without defining entries for NIS+ netgroups or LDAP - '~/hosts.equiv'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - permissionsDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/hosts.equiv' - userDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002120 - The /etc/shells (or equivalent) file must exist - '/etc/security/login.cfg contains shells='DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002230 - All shell files must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002300 - Device files used for backup must only be readable and/or writable by root or the backup user - '/dev/rmt*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL