Item Search

NameAudit NamePluginCategory
GEN001590 - All run control scripts must have no extended ACLs - '/etc/init.d'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/csh.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001800 - All skeleton files (typically those in /etc/skel) must have mode 0644 or less permissive - '/etc/security/mkuser.sys'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001810 - Skeleton files must not have extended ACLs - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001830 - All skeleton files (typically in /etc/skel) must be group-owned by security - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.bash_logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.bash_profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.dispatch'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.emacs'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.dispatch'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0755 or less permissive - '~/.dt'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.dtprofile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.rhosts' - userDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/shosts.equiv' - userDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002210 - All shell files must be group-owned by root, bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002520 - All public directories must be owned by root or an application account.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002540 - All public directories must be group-owned by system or an application group.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003040 - Crontabs must be owned by root or the crontab creator.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'daemon'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'snapp'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'sshd'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003080 - Crontab files must have mode 0600 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003270 - The cron.deny file must be group-owned by system, bin, sys, or cron.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'daemon'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'nobody'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'pconsole'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003420 - The at directory must be owned by root, bin, sys, daemon, or cron.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003440 - 'At' jobs must not set the umask to a value less restrictive than 077 - '/var/spool/cron/atjobs/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003480 - The at.deny file must be owned by root, bin, or sys.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003520 - The kernel core dump data directory must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003521 - The kernel core dump data directory must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003720 - The inetd.conf file, xinetd.conf file, and the xinetd.d directory must be owned by root or bin - 'xinetd.d'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003980 - The traceroute command must be group-owned by sys, bin, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004220 - Administrative accounts must not run a web browser, except as needed for local service administration.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004370 - The aliases file must be group-owned by sys, bin, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004400 - Files executed through a mail aliases file must be owned by root and reside within a directory owned and writable only by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004430 - Files executed through a mail aliases file must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004930 - The ftpusers file must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005000 - Anonymous FTP accounts must not have a functional shell.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005180 - All .Xauthority files must have mode 0600 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005350 - Management Information Base (MIB) files must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005360 - The snmpd.conf file must be owned by root - '/etc/snmpd.conf'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005395 - The /etc/syslog.conf file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL