Item Search

NameAudit NamePluginCategory
GEN002480 - Public directories must be the only world-writable directories and world-writable files must be located only in public dirsDISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002520 - All public directories must be owned by root or an application account.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002540 - All public directories must be group-owned by system or an application group.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002640 - Default system accounts must be disabled or removed.DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN002700 - System audit logs must have mode 0640 or less permissive.DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditpr'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditmerge'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/audit'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditmerge'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditstream'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002718 - System audit tool executables must not have extended ACLs - '/usr/sbin/auditconv'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002718 - System audit tool executables must not have extended ACLs - '/usr/sbin/auditselect'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002740 - The audit system must be configured to audit file deletions - '/etc/security/audit/events FILE_Unlink exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002750 - The audit system must be configured to audit account creation - '/etc/security/audit/events USER_Create exists'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002750 - The audit system must be configured to audit account creation - 'User audit class assignments should be reviewed'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002752 - The audit system must be configured to audit account disabling - '/etc/security/audit/config USER_Locked exists'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002752 - The audit system must be configured to audit account disabling - '/etc/security/audit/events USER_Change exists'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config ACCT_Disable exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config DEV_Change exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config FS_Chroot exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PASSWORD_Check exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PROC_Adjtime exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PROC_Setpgid exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_Create exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_SetEnv exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events AUD_it exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events DEV_Change exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events FILE_Owner exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events FS_Chroot exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PASSWORD_Check exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PROC_Adjtime exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PROC_Setpgid exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events RESTORE_Import exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events TCBCK_Delete exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events USER_Remove exists'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config INIT_End exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config USER_Login exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config USER_Logout exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/events INIT_End exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Remove exists'DISA STIG AIX 6.1 v1r14Unix

AUDIT AND ACCOUNTABILITY

GEN003040 - Crontabs must be owned by root or the crontab creator.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'daemon'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'snapp'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003060 - Default system accounts must not be in the cron.allow file or must be in cron.deny - 'sshd'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003080 - Crontab files must have mode 0600 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003270 - The cron.deny file must be group-owned by system, bin, sys, or cron.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'daemon'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'nobody'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003320 - System accounts must not be listed in at.allow or must be included in at.deny - 'pconsole'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN003420 - The at directory must be owned by root, bin, sys, daemon, or cron.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL