Item Search

NameAudit NamePluginCategory
GEN001140 - System files and directories must not have uneven access permissions - /sbin/*DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - /usr/bin/*DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - /usr/bin/*DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - /usr/sbin/*DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN001180 - All network services daemon files must have mode 0755 or less permissive - httpdDISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN001180 - All network services daemon files must have mode 0755 or less permissive - sshdDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN001280 - Manual page files must have mode 0655 or less permissive - /usr/share/man/*DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN001340 - NIS/NIS+/yp files must be group-owned by root, sys, or bin - /usr/lib/netsvc/yp/*DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN001380 - The /etc/passwd file must have mode 0644 or less permissive.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN001400 - The /etc/shadow (or equivalent) file must be owned by root.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN001420 - The /etc/shadow (or equivalent) file must have mode 0400.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN001800 - All skeleton files (typically those in /etc/skel) must have mode 0644 or less permissive.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN002320 - Audio devices must have mode 0660 or less permissive - /dev/audio*DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN003200 - The cron.deny file must have mode 0600 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN003200 - The cron.deny file must have mode 0600 or less permissive.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN003280 - Access to the at utility must be controlled via the at.allow and/or at.deny file(s).DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN003340 - The at.allow file must have mode 0600 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN003400 - The 'at' directory must have mode 0755 or less permissive - at directory must have mode 0755 or less permissive.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN003720 - The inetd.conf file must be owned by root or bin.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN003740 - The inetd.conf file must have mode 0440 or less permissive.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN003780 - The services file must have mode 0444 or less permissive.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN003920 - The hosts.lpd (or equivalent) file must be owned by root - /etc/apache/httpd-standalone-ipp.confDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN003920 - The hosts.lpd (or equivalent) file must be owned by root - /etc/printers.confDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN003940 - The hosts.lpd (or equivalent) must have mode 0644 or less permissive - SMB_CONFDISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN004000 - The traceroute file must have mode 0700 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN004400 - Files executed through a mail aliases file must be owned by root and must reside within a directory owned and writable only by root.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN004400 - Files executed through a mail aliases file must be owned by root and must reside within a directory owned and writable only by root.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN004480 - The SMTP service log file must be owned by root - /var/adm/messagesDISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN004480 - The SMTP service log file must be owned by root - /var/log/syslogDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN004500 - The SMTP service log file must have mode 0644 or less permissive - MAIL_LOGDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN004880 - The ftpusers file must exist.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN004900 - The ftpusers file must contain account names not allowed to use FTP.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN005320 - The snmpd.conf file must have mode 0600 or less permissive - /etc/sma/snmp/snmpd.confDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN005320 - The snmpd.conf file must have mode 0600 or less permissive - /etc/sma/snmp/snmpd.confDISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN005320 - The snmpd.conf file must have mode 0600 or less permissive - /usr/sfw/lib/sma_snmp/snmpd.confDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN005320 - The snmpd.conf file must have mode 0600 or less permissive - /var/sma_snmp/snmpd.confDISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN006140 - The smb.conf file must have mode 0644 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN006200 - The smbpasswd file must have mode 0600 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN006280 - The /etc/news/hosts.nntp.nolimit (or equivalent) must have mode 0600 or less permissive.DISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

GEN006320 - The /etc/news/passwd.nntp file (or equivalent) must have mode 0600 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

O112-C2-003000 - The DBMS must enforce Discretionary Access Control (DAC) policy allowing users to specify and control sharing by named individuals, groups of individuals, or by both, limiting propagation of access rights and includes or excludes access to the granularity of a single user.DISA STIG Oracle 11.2g v2r5 DatabaseOracleDB

ACCESS CONTROL

O121-C2-006600 - Databases utilizing Discretionary Access Control (DAC) must enforce a policy that limits propagation of access rights.DISA STIG Oracle 12c v3r4 DatabaseOracleDB

ACCESS CONTROL

O121-C2-006700 - A DBMS utilizing Discretionary Access Control (DAC) must enforce a policy that includes or excludes access to the granularity of a single user.DISA STIG Oracle 12c v3r4 DatabaseOracleDB

ACCESS CONTROL

OL07-00-020220 - The Oracle Linux operating system must enable the SELinux targeted policy.DISA Oracle Linux 7 STIG v3r3Unix

ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY

RHEL-07-020021 - The Red Hat Enterprise Linux operating system must confine SELinux users to roles that conform to least privilege.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

ACCESS CONTROL

RHEL-07-020023 - The Red Hat Enterprise Linux operating system must elevate the SELinux context when an administrator calls the sudo command.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

ACCESS CONTROL

RHEL-09-213030 - RHEL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.DISA Red Hat Enterprise Linux 9 STIG v2r4Unix

ACCESS CONTROL

RHEL-09-213035 - RHEL 9 must enable kernel parameters to enforce discretionary access control on symlinks.DISA Red Hat Enterprise Linux 9 STIG v2r4Unix

ACCESS CONTROL

SQL6-D0-002800 - SQL Server must enforce discretionary access control policies, as defined by the data owner, over defined subjects and objects.DISA STIG SQL Server 2016 Database Audit v3r2MS_SQLDB

ACCESS CONTROL

UBTU-16-010700 - All files and directories must have a valid owner.DISA STIG Ubuntu 16.04 LTS v2r3Unix

ACCESS CONTROL