Item Search

NameAudit NamePluginCategory
GEN001362 - The /etc/resolv.conf file must be owned by root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001364 - The /etc/resolv.conf file must have mode 0644 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001368 - The /etc/hosts file must have mode 0644 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001371 - The /etc/nsswitch.conf file must be owned by root - Not ApplicableDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001378 - The /etc/passwd file must be owned by root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001380 - The /etc/passwd file must have mode 0644 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001392 - The /etc/group file must be group-owned by security, bin, sys, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001500 - All interactive users' home directories must be owned by their respective users.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001550 - All files and directories in user's home directories must be group-owned by a group the home directory's owner is member.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001605 - Run control scripts' library search paths must contain only absolute paths.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001700 - System start-up files must only execute programs owned by a privileged UID or an application.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/bashrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/environment'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/security/.profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/security/environ'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/csh.login'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/security/.profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001810 - Skeleton files must not have extended ACLs - '/etc/security/.profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001810 - Skeleton files must not have extended ACLs - '/etc/security/mkuser.sys'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001820 - All skeleton files and directories (typically in /etc/skel) must be owned by root or bin - '/etc/security/.profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001830 - All skeleton files (typically in /etc/skel) must be group-owned by security - '/etc/security/mkuser.sys'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001840 - All global initialization files' executable search paths must contain only absolute paths - '/etc/csh.login'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001840 - All global initialization files' executable search paths must contain only absolute paths - '/etc/environment'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001845 - Global initialization files' library search paths must contain only absolute paths - '/etc/bashrc'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001845 - Global initialization files' library search paths must contain only absolute paths - '/etc/security/environ'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001860 - All local initialization files must be owned by the user or root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.bash_logout'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.bash_profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0740 or less permissive - '~/.logout'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001880 - All local initialization files must have mode 0755 or less permissive - '~/.dt'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.bashrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.cshrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.exrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001940 - User start-up files must not execute world-writable programs.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001980 - The /etc/group file must not contain a plus (+) without defining entries for NIS+ netgroups - '/etc/group'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001980 - The shosts.equiv file must not contain a plus (+) without defining entries for NIS+ netgroups - '~/shosts.equiv'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.rhosts' - permissionsDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.rhosts' - userDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/hosts.equiv' - permissionsDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002100 - The .rhosts file must not be supported in PAM.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002200 - All shell files must be owned by root or bin.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002320 - Audio devices must have mode 0660 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002360 - Audio devices must be group-owned by root, sys, bin, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002540 - All public directories must be group-owned by system or an application group.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002720 - System must be configured to audit failed attempts to access files/programs - '/etc/security/audit/events FILE_Open exists'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002740 - The audit system must be configured to audit file deletions - '/etc/security/audit/config FILE_Unlink exists'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/events USER_Login exists'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002800 - System must be configured to audit login, logout, and session initiation - '/etc/security/audit/events USER_Logout exists'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002825 - System must be configured to audit load/unload dynamic kernel modules - '/etc/security/audit/config DEV_Unconfigure exists'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY