Item Search

NameAudit NamePluginCategory
GEN001270 - System log files must not have extended ACLs, except as needed to support authorized software.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND INFORMATION INTEGRITY

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/man/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001310 - All library files must not have extended ACLs - '/usr/lib/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/netsvc/yp/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/nis/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/var/yp/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001367 - The /etc/hosts file must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001371 - The /etc/nsswitch.conf file must be owned by root - Not ApplicableDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001379 - The /etc/passwd file must be group-owned by bin, security, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001393 - The /etc/group file must have mode 0644 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001420 - The /etc/security/passwd file must have mode 0400.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001430 - The /etc/security/passwd file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001490 - User home directories must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001520 - All interactive users' home directories must be group-owned by the home directory owner's primary group.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001580 - All run control scripts must have mode 0755 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001600 - Run control scripts executable search paths must contain only authorized paths.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001640 - Run control scripts must not execute world-writable programs or scripts.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/csh.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001820 - All skeleton files and directories (typically in /etc/skel) must be owned by root or bin - '/etc/security/mkuser.sys'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001840 - All global initialization files executable search paths must contain only authorized paths - '/etc/bashrc'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001840 - All global initialization files executable search paths must contain only authorized paths - '/etc/security/environ'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001845 - Global initialization files library search paths must contain only authorized paths - '/etc/security/.login'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.env'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.exrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.bash_logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.bash_logout'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001901 - Local initialization files library search paths must contain only authorized paths - 'LD_LIBRARY_PATH'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001901 - Local initialization files library search paths must contain only authorized paths - 'LIBPATH'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002040 - There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system - '.rhosts'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.rhosts' - permissionsDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/shosts.equiv' - permissionsDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002200 - All shell files must be owned by root or bin.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002330 - Audio devices must not have extended ACLs.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002360 - Audio devices must be group-owned by root, sys, bin, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002560 - The system and user default umask must be 077 - '/etc/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002560 - The system and user default umask must be 077 - user initialization filesDISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT