Details

If a baseline of files with the TCB bit set is not kept and checked weekly, the system could be compromised without the knowledge of any authority.

Solution

Add tcbck command as a weekly cronjob with the output sent to the SA.

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-7(1)
• CAT|II
• CCI|CCI-001298
• Group-ID|V-4287
• Rule-ID|SV-4287r2_rule
• STIG-ID|GEN000000-AIX00060
• Vuln-ID|V-4287

Source

• Tenable.com/audits