Item Search

NameAudit NamePluginCategory
GEN000380 - All Group Identifiers (GIDs) referenced in the /etc/passwd file must be defined in the /etc/group file.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN000480 - The delay between login prompts following a failed login attempt must be at least 4 seconds.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN000580 - The system must require passwords to contain a minimum of 14 characters.DISA STIG AIX 5.3 v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000585 - The system must enforce the entire password during authentication - 'Verify no password hashes in the /etc/security/passwd'DISA STIG AIX 5.3 v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000595 - Password hashes must have been generated using a FIPS 140-2 hashing algorithm - 'Verify no password hashes in /etc/passwd'DISA STIG AIX 5.3 v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001140 - System files and directories must not have uneven access permissions - '/sbin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/usr/bin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001140 - System files and directories must not have uneven access permissions - '/usr/sbin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001220 - All system files, programs, and directories must be owned by a system account - '/usr/bin/*'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/bin/*'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001240 - System files, programs, and directories must be group-owned by a system group - '/usr/lbin/*'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001260 - System log files must have mode 0640 or less permissive - '/var/adm/*'DISA STIG AIX 5.3 v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

GEN001280 - Manual page files must have mode 0644 or less permissive - '/usr/share/info/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001360 - The NIS/NIS+/yp files must have mode 0755 or less permissive - '/usr/lib/nis/*'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001410 - The /etc/security/passwd file must be group-owned by security, bin, sys, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001480 - All users' home directories must have mode 0750 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001570 - All files and directories contained in user home directories must not have extended ACLs.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001680 - All system start-up files must be group-owned by sys, bin, other, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001720 - All global initialization files must have mode 0644 or less permissive - '/etc/profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/.login'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/environment'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001730 - All global initialization files must not have extended ACLs - '/etc/profile'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/profile'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001780 - Global initialization files must contain the mesg -n or mesg n commands. - '/etc/security/environ'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.emacs'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN001890 - Local initialization files must not have extended ACLs - '.logout'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - permissionsDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002060 - All .rhosts, .shosts, .netrc, or hosts.equiv files must be accessible by only root or the owner - '~/.shosts' - userDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002230 - All shell files must not have extended ACLs.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN002400 - The system must be checked weekly for unauthorized setuid files, and unauthorized modification to authorized setuid files.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002460 - The system must be checked weekly for unauthorized setgid files, and unauthorized modification to authorized setgid files.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN002715 - System audit tool executables must be owned by root - '/usr/sbin/auditbin'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/audit'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditmerge'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002716 - System audit tool executables must be group-owned by bin, sys, or system - '/usr/sbin/auditstream'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN003060 - Default system accounts must be included in the cron.allow file - 'bin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.allow file - 'invscout'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.allow file - 'nuucp'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.allow file - 'uucp'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.deny file - 'daemon'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.deny file - 'esaadmin'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.deny file - 'nuucp'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.deny file - 'snapp'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.deny file - 'sys'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003060 - Default system accounts must be included in the cron.deny file - 'uucp'DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003080 - Crontab files must have mode 0600 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003090 - Crontab files must not have extended ACLs.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN003300 - The at.deny file must not be empty if it existsDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005536-ESXI5-000110 - The SSH daemon must perform strict mode checking of home directory configuration files.DISA STIG VMWare ESXi Server 5 STIG v2r1VMware

CONFIGURATION MANAGEMENT

SRG-OS-000159-ESXI5 - The SSH client must be configured to only use FIPS 140-2 approved ciphers.DISA STIG VMWare ESXi Server 5 STIG v2r1VMware

CONFIGURATION MANAGEMENT