Item Search

NameAudit NamePluginCategory
GEN001220 - All system files, programs, and directories must be owned by a system account - '/bin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001220 - All system files, programs, and directories must be owned by a system account - '/etc/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001220 - All system files, programs, and directories must be owned by a system account - '/usr/bin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001220 - All system files, programs, and directories must be owned by a system account - '/usr/ucb/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001290 - All manual page files must not have extended ACLs - '/usr/share/man/*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/usr/lib/netsvc/yp/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/var/nis/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/var/yp/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/netsvc/yp/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001361 - NIS/NIS+/yp command files must not have extended ACLs - '/var/nis'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001363 - The /etc/resolv.conf file must be group-owned by bin, sys, or system.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001366 - The /etc/hosts file must be owned by root.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001460 - All interactive user home directories defined in the /etc/passwd file must exist.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001475 - The /etc/group file must not contain any group password hashes.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001520 - All interactive users' home directories must be group-owned by the home directory owner's primary group.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001560 - All files and directories contained in user's home directories must have mode 0750 or less permissive.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001580 - All run control scripts must have mode 0755 or less permissive.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001640 - Run control scripts must not execute world-writable programs or scripts.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/csh.cshrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001730 - All global initialization files must not have extended ACLs - '/etc/bashrc'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/csh.cshrc'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/csh.cshrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001740 - All global initialization files must be owned by root - '/etc/security/.profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001810 - Skeleton files must not have extended ACLs - '/etc/security/mkuser.sys'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001840 - All global initialization files' executable search paths must contain only absolute paths - '/etc/profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001850 - Global initialization files' lists of preloaded libraries must contain only absolute paths - '/etc/bashrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001850 - Global initialization files' lists of preloaded libraries must contain only absolute paths - '/etc/profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.cshrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.exrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001880 - All local initialization files must have mode 0755 or less permissive - '~/.dt'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001880 - All local initialization files must have mode 0755 or less permissive - '~/.dtprofile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001890 - Local initialization files must not have extended ACLs - '.dispatch'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001940 - User start-up files must not execute world-writable programs.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002040 - There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system - '.shosts'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002040 - There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system - 'hosts.equiv'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/hosts.equiv' - permissionsDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/shosts.equiv' - permissionsDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002100 - The .rhosts file must not be supported in PAM.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002210 - All shell files must be group-owned by root, bin, sys, or system.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002300 - Device files used for backup must only be readable and/or writable by root or the backup user - '/dev/cd*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002420 - Removable media, remote file systems and any file system not containing approved setuid files must be mounted with nosuid.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002440 - The owner, group, mode, ACL, and location of files with the setgid bit set must be documented using site-defined proceduresDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002500 - The sticky bit must be set on all public directories.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditbin'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditcat'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditmerge'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditmerge'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditselect'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditpr'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditpr' - suidDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT