Item Search

NameAudit NamePluginCategory
GEN001890 - Local initialization files must not have extended ACLs - '.bash_logout'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.bash_profile'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.bashrc'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.cshrc'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.env'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.exrc'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.profile'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001900 - All local initialization files' executable search paths must contain only absolute paths.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001980 - The .rhosts file must not contain a plus (+) without defining entries for NIS+ netgroups - '~/.rhosts'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001980 - The .shosts file must not contain a plus (+) without defining entries for NIS+ netgroups - '~/.shosts'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001980 - The hosts.equiv file must not contain a plus (+) without defining entries for NIS+ netgroups - '~/hosts.equiv'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.rhosts' - userDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002120 - The /etc/shells (or equivalent) file must exist - '/etc/shells file exists'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002140 - All shells referenced in /etc/passwd must be listed in the /etc/shells file, except shells specified for preventing loginsDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN002200 - All shell files must be owned by root or bin.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002320 - Audio devices must have mode 0660 or less permissive.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002340 - Audio devices must be owned by root.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002380 - The owner, group, mode, ACL, and location of files with the setuid bit set must be documented using site-defined proceduresDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002540 - All public directories must be group-owned by system or an application group.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002640 - Default system accounts must be disabled or removed.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002700 - System audit logs must have mode 0640 or less permissive.DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditconv'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditselect'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditstream'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditcat'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditconv'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditbin' - suidDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002718 - System audit tool executables must not have extended ACLs - '/usr/sbin/auditmerge'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002718 - System audit tool executables must not have extended ACLs - '/usr/sbin/auditselect'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002720 - System must be configured to audit failed attempts to access files/programs - 'User audit class assignments should be reviewed'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002740 - The audit system must be configured to audit file deletions - '/etc/security/audit/events FS_Rmdir exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002750 - The audit system must be configured to audit account creation - 'User audit class assignments should be reviewed'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002752 - The audit system must be configured to audit account disabling - '/etc/security/audit/config USER_Locked exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config ACCT_Disable exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PROC_Setpgid exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config RESTORE_Import exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config TCBCK_Delete exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events AUD_it exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events DEV_Change exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PASSWORD_Check exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PROC_SetUserIDs exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events TCBCK_Delete exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events USER_Reboot exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - 'User audit class assignments should be reviewed'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config USER_SU exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Remove exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Stop exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Unconfigure exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/events DEV_Unconfigure exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002960 - Access to the cron utility must be controlled using the cron.allow and/or cron.deny file(s) - '/var/adm/cron/cron.allow'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL