Item Search

NameAudit NamePluginCategory
1.013 - System information backups are not created, updated, and protected according to DISA requirements.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.055 - The default permissions of Global system objects are not increased.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.094 - The system is configured to allow IP source routing.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.101 - The system must be configured to ignore NetBIOS name release requests except from WINS servers.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.141 - User Account Control - Executable ElevationDISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

4.019 - Outdated or unused accounts must be removed from the system.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

4.024 - Local users must not exist on a system in a domain.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.209 - Device Install - Drivers System Restore PointDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.214 - Event Viewer Events.asp LinksDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.216 - Internet Connection Wizard ISP DownloadsDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.226 - Remote Assistance - Session LoggingDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.227 - Digital LockerDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

GEN000380 - All Group Identifiers (GIDs) referenced in the /etc/passwd file must be defined in the /etc/group file.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN000850 - The system must restrict the ability to switch to the root user to members of a defined group.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN000900 - The root user's home directory must not be the root directory (/).DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/info/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001460 - All interactive user home directories defined in the /etc/passwd file must exist.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001540 - All files and directories contained in interactive user's home directories must be owned by the home directory's owner.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/.login'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/profile'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/security/environ'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/audit'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditbin'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/audit'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditmerge'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditstream'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditbin'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditbin' - suidDISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditcat'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditmerge' - umaskDISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditpr'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditpr' - suidDISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditstream'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/auditstream' - suidDISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002718 - System audit tool executables must not have extended ACLs - '/usr/sbin/audit'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN003500 - Process core dumps must be disabled unless needed.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN003521 - The kernel core dump data directory must be group-owned by bin, sys, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003523 - The kernel core dump data directory must not have an extended ACL.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003602 - The system must not process ICMP timestamp requests.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003611 - The system must log martian packets.DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN003623 - The system must use a separate file system for the system audit data path.DISA STIG AIX 5.3 v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN003800 - Inetd or xinetd logging/tracing must be enabled.DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN003860 - The system must not have the finger service active.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN004980 - The FTP daemon must be configured for logging or verbose mode - '/etc/inetd.conf contains ftpd -l'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN005525 - The SSH client must not permit GSSAPI authentication unless needed.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN005770 - The NFS exports configuration file must not have an extended ACL.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006571 - The file integrity tool must be configured to verify extended attributes.DISA STIG AIX 5.3 v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

GEN006575 - The file integrity tool must use FIPS 140-2 approved cryptographic hashes for validating file contents.DISA STIG AIX 5.3 v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

GEN008460 - The system must have USB disabled unless needed - 'lslpp'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN008480 - The system must have USB Mass Storage disabled unless needed.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT