Home
Security Hardening
DISA STIG AIX 7.x V2R3

DISA STIG AIX 7.x V2R3

AIX7-00-001019 – AIX device files and directories must only be writable by users with a system account or as configured by the vendor – Type C
Details System device files in writable directories could be modified, removed, or used by an unprivileged user to control system...
AIX7-00-001024 – SSH must display the date and time of the last successful account login to AIX system upon login.
Details Remote access services, such as those providing remote access to network devices and information systems, which lack automated control...
AIX7-00-001025 – AIX must configure the ttys value for all interactive users – ALL users
Details A user’s ‘ttys’ attribute controls from which device(s) the user can authenticate and log in. If the ‘ttys’ attribute...
AIX7-00-001025 – AIX must configure the ttys value for all interactive users – default user
Details A user’s ‘ttys’ attribute controls from which device(s) the user can authenticate and log in. If the ‘ttys’ attribute...
AIX7-00-001028 – AIX must provide the lock command to let users retain their session lock until users are reauthenticated.
Details All systems are vulnerable if terminals are left logged in and unattended. Leaving system terminals unsecure poses a potential...
AIX7-00-001036 – UIDs reserved for system accounts must not be assigned to non-system accounts on AIX systems.
Details Reserved UIDs are typically used by system software packages. If non-system accounts have UIDs in this range, they may...
AIX7-00-001037 – The AIX root accounts list of preloaded libraries must be empty.
Details The library preload list environment variable contains a list of libraries for the dynamic linker to load before loading...
AIX7-00-001037 – The AIX root accounts list of preloaded libraries must be empty – /etc/hosts.deny
Details The library preload list environment variable contains a list of libraries for the dynamic linker to load before loading...
AIX7-00-001032 – AIX administrative accounts must not run a web browser, except as needed for local service administration – netscape
Details If a web browser flaw is exploited while running as a privileged user, the entire system could be compromised....
AIX7-00-001033 – AIX default system accounts (with the exception of root) must not be listed in the cron.allow file or must be included in the cron.deny file, if cron.allow does not exist – adm
Details To centralize the management of privileged account crontabs, of the default system accounts, only root may have a crontab....

Prev Next

DISA STIG AIX 7.x V2R3

AIX7-00-001019 – AIX device files and directories must only be writable by users with a system account or as configured by the vendor – Type C

AIX7-00-001024 – SSH must display the date and time of the last successful account login to AIX system upon login.

AIX7-00-001025 – AIX must configure the ttys value for all interactive users – ALL users

AIX7-00-001025 – AIX must configure the ttys value for all interactive users – default user

AIX7-00-001028 – AIX must provide the lock command to let users retain their session lock until users are reauthenticated.

AIX7-00-001036 – UIDs reserved for system accounts must not be assigned to non-system accounts on AIX systems.

AIX7-00-001037 – The AIX root accounts list of preloaded libraries must be empty.

AIX7-00-001037 – The AIX root accounts list of preloaded libraries must be empty – /etc/hosts.deny

AIX7-00-001032 – AIX administrative accounts must not run a web browser, except as needed for local service administration – netscape

AIX7-00-001033 – AIX default system accounts (with the exception of root) must not be listed in the cron.allow file or must be included in the cron.deny file, if cron.allow does not exist – adm