Item Search

NameAudit NamePluginCategory
GEN000241 - The system clock must be synchronized continuously, or at least daily - 'NTP daemon is running'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN000251 - The time synchronization configuration file (such as /etc/ntp.conf) must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000253 - The time synchronization configuration file (such as /etc/ntp.conf) must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000400 - The Department of Defense (DoD) login banner must be displayed immediately prior to, or as part of, console login prompts.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000402 - The DoD login banner must be displayed as part of graphical desktop environment login prompts - 'Xlogin*greeting'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000410 - The FTPS/FTP service on the system must be configured with the DoD login banner - '/etc/ftpaccess.ctl contains herald'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000410 - The FTPS/FTP service on the system must be configured with the DoD login banner - '/etc/herald contains banner'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000440 - Successful and unsuccessful logins and logouts must be logged - 'successful logins are being logged'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN000450 - The system must limit users to 10 simultaneous system logins in accordance with operational requirements.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000480 - The delay between login prompts following a failed login attempt must be at least 4 seconds.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000585 - The system must enforce the entire password during authentication - 'Verify no password hashes in /etc/passwd'DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN000595 - Password hashes must have been generated using a FIPS 140-2 hashing algorithm - 'Verify no password hashes in /etc/passwd'DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN000680 - The system must require passwords to contain no more than three consecutive repeating characters.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN000760 - Accounts must be locked upon 35 days of inactivity.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000880 - The root account must be the only account having an UID of 0.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN000920 - The root account's home directory (other than /) must have mode 0700.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000950 - The root account's list of preloaded libraries must be empty.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001120 - The system must not permit root logins using remote access programs, such as ssh.DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN001140 - System files and directories must not have uneven access permissions - '/usr/bin'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/usr/sbin'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001180 - All network services daemon files must have mode 0755 or less permissive - '/usr/bin/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001200 - All system command files must have mode 0755 or less permissive - '/etc/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001200 - All system command files must have mode 0755 or less permissive - '/usr/sbin/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001210 - All system command files must not have extended ACLs - '/usr/ucb/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001220 - All system files, programs, and directories must be owned by a system account - '/etc/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/usr/lbin/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/info/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/infopage/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001290 - All manual page files must not have extended ACLs - '/usr/share/info/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001310 - All library files must not have extended ACLs - '/lib/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/var/nis/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001361 - NIS/NIS+/yp command files must not have extended ACLs - '/var/nis'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001363 - The /etc/resolv.conf file must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001365 - The /etc/resolv.conf file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001372 - The /etc/nsswitch.conf file must be group-owned by root, bin, sys, or system - Not ApplicableDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001374 - The /etc/nsswitch.conf file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001378 - The /etc/passwd file must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001390 - The /etc/passwd file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001391 - The /etc/group file must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001394 - The /etc/group file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001440 - All interactive users must be assigned a home directory in the /etc/passwd file.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001460 - All interactive user home directories defined in the /etc/passwd file must exist.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001540 - All files and directories contained in interactive user's home directories must be owned by the home directory's owner.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001590 - All run control scripts must have no extended ACLs - '/etc/rc*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001700 - System start-up files must only execute programs owned by a privileged UID or an application.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/csh.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/csh.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL