Item Search

NameAudit NamePluginCategory
GEN001368 - The /etc/hosts file must have mode 0644 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001369 - The /etc/hosts file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001373 - The /etc/nsswitch.conf file must have mode 0644 or less permissive - Not ApplicableDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001392 - The /etc/group file must be group-owned by security, bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001410 - The /etc/security/passwd file must be group-owned by security, bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001475 - The /etc/group file must not contain any group password hashes.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001480 - All users' home directories must have mode 0750 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001560 - All files and directories contained in user's home directories must have mode 0750 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001680 - All system start-up files must be group-owned by sys, bin, other, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/csh.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/csh.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.exrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.dispatch'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.env'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - permissionsDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/hosts.equiv' - userDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002230 - All shell files must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002300 - Device files used for backup must only be readable and/or writable by root or the backup user - '/dev/rmt*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002320 - Audio devices must have mode 0660 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002990 - The cron.allow file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003020 - Cron must not execute programs in, or subordinate to, world-writable directories.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003050 - Crontab files must be group-owned by system, cron, or the crontab creator's primary group.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'esaadmin'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'guest'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'ipsec'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'lp'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'nobody'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003190 - The cron log files must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003252 - The at.deny file must have mode 0640 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003255 - The at.deny file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'sys'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'uucp'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003400 - The at directory must have mode 0755 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003430 - The 'at' directory must be group-owned by system, bin, sys, or cron.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003522 - The kernel core dump data directory must have mode 0700 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003730 - The inetd.conf file, xinetd.conf file, and the xinetd.d directory must be group-owned by bin, sys, or system - 'xinetd.d'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003760 - The services file must be owned by root or bin.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003790 - The services file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003940 - The hosts.lpd (or equivalent) must have mode 0644 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003960 - The traceroute command owner must be root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL