Item Search

NameAudit NamePluginCategory
GEN000680 - The system must require passwords to contain no more than three consecutive repeating characters.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN000760 - Accounts must be locked upon 35 days of inactivity.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000880 - The root account must be the only account having an UID of 0.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN000920 - The root account's home directory (other than /) must have mode 0700.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN000950 - The root account's list of preloaded libraries must be empty.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001120 - The system must not permit root logins using remote access programs, such as ssh.DISA STIG AIX 6.1 v1r14Unix

IDENTIFICATION AND AUTHENTICATION

GEN001140 - System files and directories must not have uneven access permissions - '/usr/bin'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/usr/sbin'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001180 - All network services daemon files must have mode 0755 or less permissive - '/usr/bin/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001200 - All system command files must have mode 0755 or less permissive - '/etc/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001200 - All system command files must have mode 0755 or less permissive - '/usr/sbin/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001210 - All system command files must not have extended ACLs - '/usr/ucb/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001220 - All system files, programs, and directories must be owned by a system account - '/etc/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/usr/lbin/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/info/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/infopage/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001290 - All manual page files must not have extended ACLs - '/usr/share/info/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001310 - All library files must not have extended ACLs - '/lib/*'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/var/nis/*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001361 - NIS/NIS+/yp command files must not have extended ACLs - '/var/nis'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001363 - The /etc/resolv.conf file must be group-owned by bin, sys, or system.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001365 - The /etc/resolv.conf file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001372 - The /etc/nsswitch.conf file must be group-owned by root, bin, sys, or system - Not ApplicableDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001374 - The /etc/nsswitch.conf file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001378 - The /etc/passwd file must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001390 - The /etc/passwd file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001391 - The /etc/group file must be owned by root.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001394 - The /etc/group file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001440 - All interactive users must be assigned a home directory in the /etc/passwd file.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001460 - All interactive user home directories defined in the /etc/passwd file must exist.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001540 - All files and directories contained in interactive user's home directories must be owned by the home directory's owner.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001590 - All run control scripts must have no extended ACLs - '/etc/rc*'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001700 - System start-up files must only execute programs owned by a privileged UID or an application.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/bashrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/csh.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/csh.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/csh.cshrc'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/environment'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN001800 - All skeleton files (typically those in /etc/skel) must have mode 0644 or less permissive - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001810 - Skeleton files must not have extended ACLs - '/etc/security/mkuser.sys'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001820 - All skeleton files and directories (typically in /etc/skel) must be owned by root or bin - '/etc/security/.profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.dtprofile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.bash_profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.emacs'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.login'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.bash_profile'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL