Item Search

NameAudit NamePluginCategory
GEN000920 - The root account's home directory (other than /) must have mode 0700 - Not ApplicableDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/sbin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/usr/bin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/usr/sbin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/info/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/usr/lib/nis/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/nis/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001365 - The /etc/resolv.conf file must not have an extended ACL.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001374 - The /etc/nsswitch.conf file must not have an extended ACL.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001410 - The /etc/security/passwd file must be group-owned by security, bin, sys, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001460 - All interactive user home directories defined in the /etc/passwd file must exist.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001480 - All users' home directories must have mode 0750 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001570 - All files and directories contained in user home directories must not have extended ACLs.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001580 - All run control scripts must have mode 0755 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001680 - All system start-up files must be group-owned by sys, bin, other, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/.login'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/environment'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/bashrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/csh.login'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/environment'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/security/environ'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.emacs'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.cshrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.login'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.logout'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - permissionsDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - userDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002230 - All shell files must not have extended ACLs.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.allow file - 'bin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.allow file - 'invscout'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.allow file - 'nuucp'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.allow file - 'uucp'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.deny file - 'daemon'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.deny file - 'esaadmin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005365 - The snmpd.conf file must be group-owned by bin, sys, or system - '/etc/snmpdv3.conf'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005390 - The /etc/syslog.conf file must have mode 0640 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005400 - The /etc/syslog.conf file must be owned by root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005420 - The /etc/syslog.conf file must be group-owned by bin, sys, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005900 - The nosuid option must be enabled on all NFS client mounts.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006150 - The /usr/lib/smb.conf file must not have an extended ACL.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006180 - The /var/private/smbpasswd file must be group-owned by sys or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006220 - The smb.conf file must use the hosts option to restrict access to Samba.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006300 - The /etc/news/nnrp.access (or equivalent) must have mode 0600 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006360 - The files in /etc/news must be group-owned by system or news.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN008060 - If the system is using LDAP the /etc/ldap.conf file must have mode 0644 or less permissiveDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN008140 - The TLS certificate authority file and/or directory (as appropriate) must be owned by rootDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL