Item Search

NameAudit NamePluginCategory
GEN000000-AIX0330 - The /etc/ftpaccess.ctl file must be group-owned by bin, sys, or system.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000000-AIX0340 - The /etc/ftpaccess.ctl file must have mode 0640 or less permissive.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000000-AIX0350 - The /etc/ftpaccess.ctl file must not have an extended ACL.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000240 - The system clock must be synchronized to an authoritative DoD time source - 'NTP daemon uses approved sources'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN000242 - The system must use at least two time sources for clock synchronization - 'NTP daemon is running'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN000290 - The system must not have unnecessary accounts - 'games does not exsit'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000290 - The system must not have unnecessary accounts - 'guest does not exsit'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000290 - The system must not have unnecessary accounts - 'lp does not exsit'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000410 - The FTPS/FTP service on the system must be configured with the DoD login banner - '/etc/ftpaccess.ctl group-owned by system'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000410 - The FTPS/FTP service on the system must be configured with the DoD login banner - '/etc/ftpaccess.ctl owned by root'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000580 - The system must require passwords to contain a minimum of 14 characters.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000585 - The system must enforce the entire password during authentication - 'Verify no password hashes in the /etc/security/passwd'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000590 - The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000800 - The system must prohibit the reuse of passwords within five iterations.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000920 - The root account's home directory (other than /) must have mode 0700.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN000980 - The system must prevent the root account from directly logging in except from the system console.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/usr/sbin'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001140 - System files and directories must not have uneven access permissions - '/usr/ucb'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001160 - All files and directories must have a valid owner.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001190 - All network services daemon files must not have extended ACLs - /usr/bin/*DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001190 - All network services daemon files must not have extended ACLs - /usr/sbin/*DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001200 - All system command files must have mode 0755 or less permissive - '/usr/bin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001200 - All system command files must have mode 0755 or less permissive - '/usr/ucb/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001210 - All system command files must not have extended ACLs - '/usr/sbin/*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001220 - All system files, programs, and directories must be owned by a system account - '/sbin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/usr/bin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/usr/lbin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/infopage/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001290 - All manual page files must not have extended ACLs - '/usr/share/info/*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001290 - All manual page files must not have extended ACLs - '/usr/share/infopage/*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/usr/lib/nis/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/usr/lib/netsvc/yp/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001361 - NIS/NIS+/yp command files must not have extended ACLs - '/var/yp'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001365 - The /etc/resolv.conf file must not have an extended ACL.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001368 - The /etc/hosts file must have mode 0644 or less permissive.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001369 - The /etc/hosts file must not have an extended ACL.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001372 - The /etc/nsswitch.conf file must be group-owned by root, bin, sys, or system - Not ApplicableDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001380 - The /etc/passwd file must have mode 0644 or less permissive.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001390 - The /etc/passwd file must not have an extended ACL.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001410 - The /etc/security/passwd file must be group-owned by security, bin, sys, or system.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001440 - All interactive users must be assigned a home directory in the /etc/passwd file.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001480 - All users' home directories must have mode 0750 or less permissive.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001590 - All run control scripts must have no extended ACLs - '/etc/rc*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001600 - Run control scripts' executable search paths must contain only absolute paths.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001610 - Run control scripts' lists of preloaded libraries must contain only absolute paths.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001660 - All system start-up files must be owned by root.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001730 - All global initialization files must not have extended ACLs - '/etc/csh.login'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/security/environ'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/csh.cshrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/csh.login'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT