Home
Security Hardening
CIS AIX 5.3.6.1 L1 V1.1.0

CIS AIX 5.3.6.1 L1 V1.1.0

CDE – /etc/dt/config/*/Xresources permissions and ownership – ‘/etc/dt/config/*/Xresources root:sys 444’
Details Checking that /etc/dt/config/*Xresources files are owned by root:sys and are mode 444 Supportive Information The following resource is also...
CDE – /etc/dt/config/Xservers permissions and ownership – ‘/etc/dt/config/Xservers root:bin 444’
Details Checking that /etc/dt/config/Xconfig is owned by root:bin and is mode 444 Supportive Information The following resource is also helpful....
CDE – login screen hostname masking – ‘dtlogin*greeting.labelString is set to appropriate text’
Details Checking that files in /usr/dt/config/*/Xresources have been edited to change the message displayed in the first dialog box on...
CDE – login screen hostname masking – ‘dtlogin*greeting.persLabelString is set to appropriate text’
Details NOTE : Update PERS_LABEL_STRING with the appropriate value for the local environment Supportive Information The following resource is also...
CDE – screensaver lock – ‘dtsession*lockTimeout <= 10'
Details Checking that files in /usr/dt/config/*/sys.resources have been edited to change the default screensaver lock timeout. Supportive Information The following...
CDE – screensaver lock – ‘dtsession*saverTimeout <= 10'
Details Checking that files in /usr/dt/config/*/sys.resources have been edited to change the default screensaver timeout. Supportive Information The following resource...
CDE – sgid/suid binary lockdown – ‘/usr/dt/bin/dtaction root:sys 555’
Details Checking that /usr/dt/bin/dtaction is owned by root:sys and is mode 555 Supportive Information The following resource is also helpful....
CDE – sgid/suid binary lockdown – ‘/usr/dt/bin/dtappgather root:bin 555’
Details Checking that /usr/dt/bin/dtappgather is owned by root:bin and is mode 0555 Supportive Information The following resource is also helpful....
CDE – sgid/suid binary lockdown – ‘/usr/dt/bin/dtprintinfo root:bin 555’
Details Checking that dtprintinfo is owned by root:bin and is mode 0555 Supportive Information The following resource is also helpful....
CDE – sgid/suid binary lockdown – ‘/usr/dt/bin/dtsession root:bin 555’
Details Checking that dtsession is owned by root:bin and is mode 0555 Supportive Information The following resource is also helpful....

CIS AIX 5.3.6.1 L1 V1.1.0

CDE – /etc/dt/config/*/Xresources permissions and ownership – ‘/etc/dt/config/*/Xresources root:sys 444’

CDE – /etc/dt/config/Xservers permissions and ownership – ‘/etc/dt/config/Xservers root:bin 444’

CDE – login screen hostname masking – ‘dtlogin*greeting.labelString is set to appropriate text’

CDE – login screen hostname masking – ‘dtlogin*greeting.persLabelString is set to appropriate text’

CDE – screensaver lock – ‘dtsession*lockTimeout <= 10'

CDE – screensaver lock – ‘dtsession*saverTimeout <= 10'

CDE – sgid/suid binary lockdown – ‘/usr/dt/bin/dtaction root:sys 555’

CDE – sgid/suid binary lockdown – ‘/usr/dt/bin/dtappgather root:bin 555’

CDE – sgid/suid binary lockdown – ‘/usr/dt/bin/dtprintinfo root:bin 555’

CDE – sgid/suid binary lockdown – ‘/usr/dt/bin/dtsession root:bin 555’

CDE – /etc/dt/config//Xresources permissions and ownership – ‘/etc/dt/config//Xresources root:sys 444’