Item Search

NameAudit NamePluginCategory
GEN000250 - The time synchronization configuration file (such as /etc/ntp.conf) must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000520 - The root user must not own the logon session for an application requiring a continuous display.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/sbin'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/usr/ucb'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001190 - All network services daemon files must not have extended ACLs - /usr/sbin/*DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/man/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/netsvc/yp/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/nis/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/var/yp/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001367 - The /etc/hosts file must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001371 - The /etc/nsswitch.conf file must be owned by root - Not ApplicableDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001379 - The /etc/passwd file must be group-owned by bin, security, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001393 - The /etc/group file must have mode 0644 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001420 - The /etc/security/passwd file must have mode 0400.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001430 - The /etc/security/passwd file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001490 - User home directories must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001520 - All interactive users' home directories must be group-owned by the home directory owner's primary group.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001580 - All run control scripts must have mode 0755 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001640 - Run control scripts must not execute world-writable programs or scripts.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/csh.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001820 - All skeleton files and directories (typically in /etc/skel) must be owned by root or bin - '/etc/security/mkuser.sys'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.env'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.exrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.bash_logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.bash_logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN005390 - The /etc/rsyslog.conf file must have mode 0640 or less permissive.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN005390 - The /etc/syslog.conf file must have mode 0640 or less permissive.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN005536 - The SSH daemon must perform strict mode checking of home directory configuration files.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN005750 - The NFS export configuration file must be group-owned by root, bin, sys, or system.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN005800 - All NFS-exported system files and system directories must be owned by root.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN006270 - The /etc/news/incoming.conf file must not have an extended ACL.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN006290 - The /etc/news/hosts.nntp.nolimit file must not have an extended ACL.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN006340 - Files in /etc/news must be owned by root or news.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN008080 - If using LDAP for authentication or account information, the /etc/ldap.conf (or equivalent) file must be owned by root.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN008140 - If using LDAP for auth or acct information, the TLS certificate auth file and dir must be owned by root - '/etc/ssl/ca.cert'DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN008180 - If using LDAP for auth or account info, the TLS cert file and dir must have mode 0644 or less permissive - '/etc/ssl/certs'DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN008220 - For systems using NSS LDAP, the TLS certificate file must be owned by root - ''/etc/openldap/cacerts/cert.pemDISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL

GEN008240 - Using LDAP for auth or acct info, TLS cert must be group-owned by root,bin,sys,or system - '/etc/openldap/cacerts/cert.pem'DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

ACCESS CONTROL