Home
Security Hardening
DISA STIG AIX 7.x V2R3

DISA STIG AIX 7.x V2R3

AIX7-00-001000 – AIX /etc/security/mkuser.sys.custom file must not exist unless it is needed for customizing a new user account.
Details The ‘/etc/security/mkuser.sys.custom’ is called by ‘/etc/security/mkuser.sys’ to customize the new user account when a new user is created, or...
AIX7-00-001001 – AIX must automatically remove or disable temporary user accounts after 72 hours or sooner.
Details If temporary user accounts remain active when no longer needed or for an excessive period, these accounts may be...
AIX7-00-001003 – AIX must enforce the limit of three consecutive invalid login attempts by a user before the user account is locked and released by an administrator.
Details By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
AIX7-00-001004 – AIX must limit the number of concurrent sessions to 10 for all accounts and/or account types.
Details Operating system management includes the ability to control the number of users and user sessions that utilize an operating...
AIX7-00-001006 – If the AIX system is using LDAP for authentication or account information, the LDAP SSL, or TLS connection must require the server provide a certificate and this certificate must have a valid path to a trusted CA – Certificate Issuer
Details Without path validation, an informed trust decision by the relying party cannot be made when presented with any certificate...
AIX7-00-001006 – If the AIX system is using LDAP for authentication or account information, the LDAP SSL, or TLS connection must require the server provide a certificate and this certificate must have a valid path to a trusted CA – ldapsslkeyf
Details Without path validation, an informed trust decision by the relying party cannot be made when presented with any certificate...
AIX7-00-001006 – If the AIX system is using LDAP for authentication or account information, the LDAP SSL, or TLS connection must require the server provide a certificate and this certificate must have a valid path to a trusted CA – useSSL
Details Without path validation, an informed trust decision by the relying party cannot be made when presented with any certificate...
AIX7-00-001007 – If AIX is using LDAP for authentication or account information, the /etc/ldap.conf file (or equivalent) must not contain passwords – bindpwd DES
Details Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords...
AIX7-00-001007 – If AIX is using LDAP for authentication or account information, the /etc/ldap.conf file (or equivalent) must not contain passwords – ldapsslkeypwd
Details Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords...
AIX7-00-001008 – All accounts on AIX system must have unique account names.
Details To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and...

DISA STIG AIX 7.x V2R3

AIX7-00-001000 – AIX /etc/security/mkuser.sys.custom file must not exist unless it is needed for customizing a new user account.

AIX7-00-001001 – AIX must automatically remove or disable temporary user accounts after 72 hours or sooner.

AIX7-00-001003 – AIX must enforce the limit of three consecutive invalid login attempts by a user before the user account is locked and released by an administrator.

AIX7-00-001004 – AIX must limit the number of concurrent sessions to 10 for all accounts and/or account types.

AIX7-00-001006 – If the AIX system is using LDAP for authentication or account information, the LDAP SSL, or TLS connection must require the server provide a certificate and this certificate must have a valid path to a trusted CA – Certificate Issuer

AIX7-00-001006 – If the AIX system is using LDAP for authentication or account information, the LDAP SSL, or TLS connection must require the server provide a certificate and this certificate must have a valid path to a trusted CA – ldapsslkeyf

AIX7-00-001006 – If the AIX system is using LDAP for authentication or account information, the LDAP SSL, or TLS connection must require the server provide a certificate and this certificate must have a valid path to a trusted CA – useSSL

AIX7-00-001007 – If AIX is using LDAP for authentication or account information, the /etc/ldap.conf file (or equivalent) must not contain passwords – bindpwd DES

AIX7-00-001007 – If AIX is using LDAP for authentication or account information, the /etc/ldap.conf file (or equivalent) must not contain passwords – ldapsslkeypwd

AIX7-00-001008 – All accounts on AIX system must have unique account names.