Item Search

NameAudit NamePluginCategory
4.010 - User rights assignments must meet minimum requirements. - Modify an object labelDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Modify firmware environment valuesDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.021 - The built-in guest account has not been renamed.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.022 - The built-in administrator account has not been renamed.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.042 - Terminal Services is not configured to always prompt a client for passwords upon connection.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

5.126 - Web Publishing and online ordering wizards prevented from downloading list of providers.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.136 - Notify antivirus when file attachments are opened.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.206 - Network - Windows Connect Now Wireless Configuration - DisableUPnPRegistrarDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.217 - Disable Internet File Association ServiceDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.222 - Windows Movie Maker Online HostingDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.234 - Defender - SpyNet ReportingDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.241 - Windows Installer - IE Security PromptDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.249 - Meeting SpaceDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

DG0079-ORACLE11 - DBMS login accounts require passwords to meet complexity requirements.DISA STIG Oracle 11 Instance v9r1 DatabaseOracleDB

IDENTIFICATION AND AUTHENTICATION

DG0126-ORACLE11 - Password reuse should be prevented where supported by the DBMS - 'No unlimited REUSE_MAX or REUSE_TIME for non DEFAULT profiles'DISA STIG Oracle 11 Instance v9r1 DatabaseOracleDB

IDENTIFICATION AND AUTHENTICATION

GEN000140 - A file integrity baseline must be created and maintained.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN000251 - The time synchronization configuration file (such as /etc/ntp.conf) must be group-owned by bin, sys, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN000252 - The time synchronization configuration file (such as /etc/ntp.conf) must have mode 0640 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN000290 - The system must not have unnecessary accounts - 'guest does not exsit'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN000360 - Group Identifiers (GIDs) reserved for system accounts must not be assigned to non-system groups.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN000402 - The DoD login banner must be displayed as part of graphical desktop environment login prompts - 'Xlogin*greeting'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN000880 - The root account must be the only account having an UID of 0.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001140 - System files and directories must not have uneven access permissions - '/bin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001160 - All files and directories must have a valid owner.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001190 - All network services daemon files must not have extended ACLs - /usr/sbin/*DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001260 - System log files must have mode 0640 or less permissive - '/var/log/syslog/*'DISA STIG AIX 5.3 v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

GEN001320 - NIS/NIS+/yp files must be owned by root, sys, or bin - '/var/nis/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/usr/lib/netsvc/yp/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001340 - NIS/NIS+/yp files must be group-owned by sys, bin, other, or system - '/var/nis/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/netsvc/yp/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/var/yp/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001366 - The /etc/hosts file must be owned by root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001373 - The /etc/nsswitch.conf file must have mode 0644 or less permissive - Not ApplicableDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001391 - The /etc/group file must be owned by root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001400 - The /etc/security/passwd file must be owned by root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001590 - All run control scripts must have no extended ACLs - '/etc/init.d'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001610 - Run control scripts' lists of preloaded libraries must contain only absolute paths.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001660 - All system start-up files must be owned by root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/bashrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/csh.cshrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/csh.login'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/.login'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001740 - All global initialization files must be owned by root - '/etc/profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/.login'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/bashrc'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001760 - All global initialization files must be group-owned by sys, bin, system, or security - '/etc/security/.profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001800 - All skeleton files (typically those in /etc/skel) must have mode 0644 or less permissive - '/etc/security/.profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001840 - All global initialization files' executable search paths must contain only absolute paths - '/etc/csh.cshrc'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001850 - Global initialization files' lists of preloaded libraries must contain only absolute paths - '/etc/security/environ'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.dtprofile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL