Item Search

NameAudit NamePluginCategory
GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config DEV_Change exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config FS_Chroot exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PASSWORD_Check exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PROC_Adjtime exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PROC_Setpgid exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_Create exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_SetEnv exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events AUD_it exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events DEV_Change exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events FILE_Owner exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events FS_Chroot exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PASSWORD_Check exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PROC_Adjtime exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PROC_Setpgid exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events RESTORE_Import exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events TCBCK_Delete exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events USER_Remove exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config INIT_End exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config USER_Login exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config USER_Logout exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/events INIT_End exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Remove exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN003040 - Crontabs must be owned by root or the crontab creator.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'daemon'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'snapp'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'sshd'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003080 - Crontab files must have mode 0600 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003270 - The cron.deny file must be group-owned by system, bin, sys, or cron.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'daemon'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'nobody'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'pconsole'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003420 - The at directory must be owned by root, bin, sys, daemon, or cron.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003440 - 'At' jobs must not set the umask to a value less restrictive than 077 - '/var/spool/cron/atjobs/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003480 - The at.deny file must be owned by root, bin, or sys.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003520 - The kernel core dump data directory must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003521 - The kernel core dump data directory must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003602 - The system must not process ICMP timestamp requests.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003609 - The system must ignore IPv4 ICMP redirect messages.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN003612 - The system must be configured to use TCP syncookies when experiencing a TCP SYN flood.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003660 - The system must log authentication informational data - 'auth.*'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN003720 - The inetd.conf file, xinetd.conf file, and the xinetd.d directory must be owned by root or bin - 'xinetd.d'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003815 - The portmap or rpcbind service must not be installed unless needed.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN003850 - The telnet daemon must not be running.DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN003980 - The traceroute command must be group-owned by sys, bin, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004220 - Administrative accounts must not run a web browser, except as needed for local service administration.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004370 - The aliases file must be group-owned by sys, bin, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004400 - Files executed through a mail aliases file must be owned by root and reside within a directory owned and writable only by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004430 - Files executed through a mail aliases file must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN004540 - The SMTP service HELP command must not be enabled.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN004560 - The SMTP service's SMTP greeting must not provide version information.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT