GEN001140 - System files and directories must not have uneven access permissions - '/sbin' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001140 - System files and directories must not have uneven access permissions - '/usr/bin' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001140 - System files and directories must not have uneven access permissions - '/usr/sbin' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001260 - System log files must have mode 0640 or less permissive - '/var/adm/*' | DISA STIG AIX 5.3 v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
GEN001270 - System log files must not have extended ACLs, except as needed to support authorized software. | DISA STIG AIX 5.3 v1r2 | Unix | SYSTEM AND INFORMATION INTEGRITY |
GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/usr/lib/nis/*' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/nis/*' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001365 - The /etc/resolv.conf file must not have an extended ACL. | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001374 - The /etc/nsswitch.conf file must not have an extended ACL. | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001410 - The /etc/security/passwd file must be group-owned by security, bin, sys, or system. | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001480 - All users' home directories must have mode 0750 or less permissive. | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001570 - All files and directories contained in user home directories must not have extended ACLs. | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001580 - All run control scripts must have mode 0755 or less permissive. | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001680 - All system start-up files must be group-owned by sys, bin, other, or system. | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/profile' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001730 - All global initialization files must not have extended ACLs - '/etc/.login' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001730 - All global initialization files must not have extended ACLs - '/etc/environment' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001730 - All global initialization files must not have extended ACLs - '/etc/profile' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001740 - All global initialization files must be owned by root - '/etc/bashrc' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/csh.login' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/environment' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/profile' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/security/environ' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001840 - All global initialization files' executable search paths must contain only absolute paths - '/etc/.login' | DISA STIG AIX 5.3 v1r2 | Unix | CONFIGURATION MANAGEMENT |
GEN001840 - All global initialization files' executable search paths must contain only absolute paths - '/etc/bashrc' | DISA STIG AIX 5.3 v1r2 | Unix | CONFIGURATION MANAGEMENT |
GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.emacs' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.cshrc' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.login' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.profile' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001890 - Local initialization files must not have extended ACLs - '.logout' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN001902 - Local initialization files' lists of preloaded libraries must contain only absolute paths. | DISA STIG AIX 5.3 v1r2 | Unix | CONFIGURATION MANAGEMENT |
GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - permissions | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - user | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN002230 - All shell files must not have extended ACLs. | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN002400 - The system must be checked weekly for unauthorized setuid files, and unauthorized modification to authorized setuid files. | DISA STIG AIX 5.3 v1r2 | Unix | CONFIGURATION MANAGEMENT |
GEN002430 - Removable media, remote file systems and any file system not containing approved device files must be mounted with nodev | DISA STIG AIX 5.3 v1r2 | Unix | CONFIGURATION MANAGEMENT |
GEN002460 - The system must be checked weekly for unauthorized setgid files, and unauthorized modification to authorized setgid files. | DISA STIG AIX 5.3 v1r2 | Unix | CONFIGURATION MANAGEMENT |
GEN002560 - The system and user default umask must be 077 - user initialization files | DISA STIG AIX 5.3 v1r2 | Unix | CONFIGURATION MANAGEMENT |
GEN002700 - System audit logs must have mode 0640 or less permissive. | DISA STIG AIX 5.3 v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config USER_Login exists' | DISA STIG AIX 5.3 v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/events INIT_Start exists' | DISA STIG AIX 5.3 v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Configure exists' | DISA STIG AIX 5.3 v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Create exists' | DISA STIG AIX 5.3 v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Stop exists' | DISA STIG AIX 5.3 v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
GEN002825 - System must be configured to audit load/unload dynamic kernel modules - 'User audit class assignments should be reviewed' | DISA STIG AIX 5.3 v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
GEN003060 - Default system accounts must be included in the cron.allow file - 'bin' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN003060 - Default system accounts must be included in the cron.allow file - 'invscout' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN003060 - Default system accounts must be included in the cron.allow file - 'nuucp' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN003060 - Default system accounts must be included in the cron.allow file - 'uucp' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |
GEN003060 - Default system accounts must be included in the cron.deny file - 'daemon' | DISA STIG AIX 5.3 v1r2 | Unix | ACCESS CONTROL |