Item Search

NameAudit NamePluginCategory
GEN001210 - All system command files must not have extended ACLs - '/usr/bin/*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001220 - All system files, programs, and directories must be owned by a system account - '/usr/lbin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/bin/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/usr/ucb/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001300 - Library files must have mode 0755 or less permissive - '/lib/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001300 - Library files must have mode 0755 or less permissive - '/usr/lib/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/usr/lib/nis/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/var/nis/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/var/yp/*'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001362 - The /etc/resolv.conf file must be owned by root.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001371 - The /etc/nsswitch.conf file must be owned by root - Not ApplicableDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001393 - The /etc/group file must have mode 0644 or less permissive.DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001570 - All files and directories contained in user home directories must not have extended ACLs.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/.login'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/security/environ'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/bashrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001740 - All global initialization files must be owned by root - '/etc/profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/.login'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/bashrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/security/environ'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/.login'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/csh.cshrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001800 - All skeleton files (typically those in /etc/skel) must have mode 0644 or less permissive - '/etc/security/.profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001840 - All global initialization files' executable search paths must contain only absolute paths - '/etc/.login'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001840 - All global initialization files' executable search paths must contain only absolute paths - '/etc/environment'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001845 - Global initialization files' library search paths must contain only absolute paths - '/etc/bashrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.emacs'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.login'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.emacs'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001890 - Local initialization files must not have extended ACLs - '.dtprofile'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.login'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001901 - Local initialization files' library search paths must contain only absolute paths - 'LD_LIBRARY_PATH'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001902 - Local initialization files' lists of preloaded libraries must contain only absolute paths.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001980 - /etc/security/passwd file must not contain a plus (+) without defining entries for NIS+ netgroups - '/etc/security/passwd'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN002000 - There must be no .netrc files on the system.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002040 - There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system - '.rhosts'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - permissionsDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/hosts.equiv' - userDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002120 - The /etc/shells (or equivalent) file must exist - '/etc/security/login.cfg contains shells='DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002260 - The system must be checked for extraneous device files at least weekly.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002300 - Device files used for backup must only be readable and/or writable by root or the backup user - '/dev/rmt*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002430 - Removable media, remote file systems and any file system not containing approved device files must be mounted with nodevDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002480 - Public directories must be the only world-writable directories and world-writable files must be located only in public dirsDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002710 - All system audit files must not have extended ACLs.DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditstream'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditcat'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditcat' - suidDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditconv'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditmerge' - suidDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT