Item Search

NameAudit NamePluginCategory
GEN000000-AIX0090 - The /etc/netsvc.conf file must be group-owned by bin, sys, or system.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000000-AIX0100 - The /etc/netsvc.conf file must have mode 0644 or less permissive.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000000-AIX0300 - The system must not have the bootp service active.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000242 - The system must use at least two time sources for clock synchronization - 'NTP daemon is started at boot'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN000251 - The time synchronization configuration file (such as /etc/ntp.conf) must be group-owned by bin, sys, or system.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000280 - Direct logins must not be permitted to shared, default, application, or utility accounts - 'results of last should be reviewed'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000290 - The system must not have unnecessary accounts - 'uucp does not exsit'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000300 - All accounts on the system must have unique user or account names.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000320 - All accounts must be assigned unique User Identification Numbers (UIDs).DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000410 - The FTPS/FTP service on the system must be configured with the DoD login banner - '/etc/ftpaccess.ctl permissions are 640'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000410 - The FTPS/FTP service on the system must be configured with the DoD login banner - '/etc/herald permissions are 644'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000540 - Users must not be able to change passwords more than once every 24 hours.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000560 - The system must not have accounts configured with blank or null passwords.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000595 - Password hashes must have been generated using a FIPS 140-2 hashing algorithm - 'no password hashes in /etc/security/passwd'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000640 - The system must require that passwords contain at least one special character.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000760 - Accounts must be locked upon 35 days of inactivity.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000960 - The root account must not have world-writable directories in its executable search path.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001020 - The root account must not be used for direct logins.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/bin'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001140 - System files and directories must not have uneven access permissions - '/sbin'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001140 - System files and directories must not have uneven access permissions - '/usr/lbin'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001200 - All system command files must have mode 0755 or less permissive - '/etc/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001200 - All system command files must have mode 0755 or less permissive - '/usr/sbin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001210 - All system command files must not have extended ACLs - '/etc/*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001210 - All system command files must not have extended ACLs - '/usr/bin/*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001220 - All system files, programs, and directories must be owned by a system account - '/usr/lbin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/bin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/usr/ucb/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001300 - Library files must have mode 0755 or less permissive - '/lib/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001300 - Library files must have mode 0755 or less permissive - '/usr/lib/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/usr/lib/nis/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/var/nis/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/var/yp/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001362 - The /etc/resolv.conf file must be owned by root.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001371 - The /etc/nsswitch.conf file must be owned by root - Not ApplicableDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001393 - The /etc/group file must have mode 0644 or less permissive.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001570 - All files and directories contained in user home directories must not have extended ACLs.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/.login'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/security/environ'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/bashrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001740 - All global initialization files must be owned by root - '/etc/profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/.login'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/bashrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/security/environ'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/.login'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/csh.cshrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001800 - All skeleton files (typically those in /etc/skel) must have mode 0644 or less permissive - '/etc/security/.profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

SLES-12-030500 - The SUSE operating system must have the packages required for multifactor authentication to be installed.DISA SLES 12 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

SLES-12-030510 - The SUSE operating system must implement certificate status checking for multifactor authentication.DISA SLES 12 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION