III - Administrative Public
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000368-GPOS-00154
Group -
AIX must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.
Control of program execution is a mechanism used to prevent execution of unauthorized programs. Some operating systems may provide a capability that runs counter to the mission or provides users wi...Rule Medium Severity -
SRG-OS-000437-GPOS-00194
Group -
AIX must remove all software components after updated versions have been installed.
Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may...Rule Medium Severity -
SRG-OS-000480-GPOS-00226
Group -
AIX must enforce a delay of at least 4 seconds between login prompts following a failed login attempt.
Limiting the number of login attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.Rule Medium Severity -
SRG-OS-000480-GPOS-00227
Group -
AIX system must restrict the ability to switch to the root user to members of a defined group.
Configuring a supplemental group for users permitted to switch to the root user prevents unauthorized users from accessing the root account, even with knowledge of the root credentials.Rule Medium Severity -
SRG-OS-000480-GPOS-00227
Group -
All AIX Group Identifiers (GIDs) referenced in the /etc/passwd file must be defined in the /etc/group file.
If a user is assigned the GID of a group not existing on the system, and a group with that GID is subsequently created, the user may have unintended rights to the group.Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.