Item Search

NameAudit NamePluginCategory
1.006-01 - Policy must require that administrative user accounts not be used with applications that access the internet.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

2.006 - ACLS FOR SYSTEM FILES AND DIRECTORIES DO NOT CONFORM TO MINIMUM REQUIREMENTS. - 'C:\Program Files'DISA Windows Vista STIG v6r41Windows

ACCESS CONTROL

2.006 - ACLS FOR SYSTEM FILES AND DIRECTORIES DO NOT CONFORM TO MINIMUM REQUIREMENTS. - 'C:\Windows'DISA Windows Vista STIG v6r41Windows

ACCESS CONTROL

2.015 - File share ACLs have not been reconfigured to remove the Everyone group.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

2.019 - Security-related Software Patches are not applied.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.029 - Print driver installation privilege is not restricted to administrators.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.032 - Ctrl+Alt+Del security attention sequence is Disabled.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.040 - Automatic logons must be disabled.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.046 - The Windows SMB server is not enabled to perform SMB packet signing when possible.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.047 - The Smart Card removal option is set to take no action.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.048 - The Recovery Console SET command must be disabled.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.052 - Ejection of removable NTFS media is not restricted to Administrators.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.071 - The system is configured to give anonymous users Everyone rights.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.075 - The system is not configured to recommended LDAP client signing requirements.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.082 - The system is configured to allow unsolicited remote assistance offers.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.084 - The system is configured to use an unauthorized time server. - 'NTPServer'DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

3.084 - The system is configured to use an unauthorized time server. - 'Type' - Non-domainDISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

3.092 - The system must generate an audit event when the audit log reaches a percentage of full threshold.DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

3.097 - The system is configured for a greater keep-alive time than recommended.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.114 - The Windows Server SMB client is not enabled to always perform SMB packet signing.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.119 - The system is configured to allow the display of the last user name on the logon screen.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.006 - Users must be forcibly disconnected when their logon hours expire.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

4.008 - Auditing must be configured as required. - 'Detailed Tracking -> Process Creation' successes.DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.008 - Auditing must be configured as required. - 'Logon/Logoff -> Logon'DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.008 - Auditing must be configured as required. - System -> System Integrity'DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.010 - User rights assignments must meet minimum requirements. - Access this computer from the networkDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Adjust memory quotas for a processDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Create symbolic linksDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Generate security auditsDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Increase a process working setDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

GEN005840 - The NFS server must be configured to restrict file system access to local hosts - 'All exports contain ro or rw'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN006080 - The Samba Web Administration Tool (SWAT) must be restricted to the local host or require SSL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006120 - The /usr/lib/smb.conf file must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006225 - Samba must be configured to use an authentication mechanism other than share.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN006270 - The /etc/news/hosts.nntp file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006460 - Any NIS+ server must be operating at security level 2.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006620 - The system's access control program must be configured to grant or deny system access to specific hosts - '/etc/hosts.allow'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN006620 - The system's access control program must be configured to grant or deny system access to specific hosts - '/etc/hosts.deny'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN007820 - The system must not have IP tunnels configured - 'lstun -a'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN007840 - The DHCP client must be disabled if not needed.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN007841 - Wireless network adapters must be disabled.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

GEN007860 - The system must ignore IPv6 ICMP redirect messages.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008000 - Certificates used to authenticate to the LDAP server must be provided from DoD-approved external PKI - 'useSSL = yes'DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN008020 - The LDAP TLS connection must require a certificate and this certificate has a valid path to a trusted CA - 'client Key Label'DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN008100 - If the system is using LDAP the /etc/ldap.conf file must be group-owned by security, bin, sys, or systemDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008180 - The TLS certificate authority file must have mode 0644 (0755 for directories) or less permissiveDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008460 - The system must have USB disabled unless needed - 'lslpp'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN009160 - The system must not have the Calendar Manager Service Daemon (CMSD) service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009270 - The system must not have the netstat service active on the inetd process.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009310 - The system must not have the rusersd service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL