Item Search

NameAudit NamePluginCategory
GEN001850 - Global initialization files' lists of preloaded libraries must contain only absolute paths - '/etc/security/.login'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.bash_profile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.dtprofile'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.bash_logout'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.bashrc'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.dispatch'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.env'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN001890 - Local initialization files must not have extended ACLs - '.emacs'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.logout'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002020 - All .rhosts, .shosts, or host.equiv files must only contain trusted host-user pairs.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002040 - There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the system - 'shosts.equiv'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - userDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002280 - Device files and directories must only be writable by users with a system account or as configured by the vendor.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002330 - Audio devices must not have extended ACLs.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002360 - Audio devices must be group-owned by root, sys, bin, or system.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002460 - The system must be checked weekly for unauthorized setgid files, and unauthorized modification to authorized setgid files.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002520 - All public directories must be owned by root or an application account.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002560 - The system and user default umask must be 077 - '/etc/*'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN002680 - System audit logs must be owned by root.DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002690 - System audit logs must be group-owned by bin, sys, or system.DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/audit'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditpr'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/audit'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditbin'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditpr'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/audit umask'DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditconv' - suidDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditmerge' - umaskDISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002740 - The audit system must be configured to audit file deletions - '/etc/security/audit/events FILE_Unlink exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config FILE_Chpriv exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config FILE_Mknod exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PASSWORD_Check exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PROC_Privilege exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config PROC_SetUserIDs exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_Remove exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config USER_SetEnv exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events DEV_Create exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events FS_Mount exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PROC_Adjtime exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events PROC_Setpgid exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events USER_Create exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/events USER_SetEnv exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/config USER_Login exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/events USER_Logout exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Create exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/events DEV_Create exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/events DEV_Remove exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002870 - The system must be configured to send audit records to a remote audit server - '/etc/syslog.conf has been configured'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN003020 - Cron must not execute programs in, or subordinate to, world-writable directories.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.allow file - 'daemon'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL