No profile (default benchmark)
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000206-GPOS-00084
<GroupDescription></GroupDescription>Group -
AIX log files must have mode 0640 or less permissive.
<VulnDiscussion>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an orga...Rule Medium Severity -
SRG-OS-000206-GPOS-00084
<GroupDescription></GroupDescription>Group -
AIX log files must not have extended ACLs, except as needed to support authorized software.
<VulnDiscussion>Only authorized personnel should be aware of errors and the details of the errors. Error messages are an indicator of an orga...Rule Medium Severity -
SRG-OS-000259-GPOS-00100
<GroupDescription></GroupDescription>Group -
All system command files must not have extended ACLs.
<VulnDiscussion>Restricting permissions will protect system command files from unauthorized modification. System command files include files ...Rule Medium Severity -
SRG-OS-000259-GPOS-00100
<GroupDescription></GroupDescription>Group -
All library files must not have extended ACLs.
<VulnDiscussion>Unauthorized access could destroy the integrity of the library files.</VulnDiscussion><FalsePositives></FalseP...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
<GroupDescription></GroupDescription>Group -
AIX passwd.nntp file must have mode 0600 or less permissive.
<VulnDiscussion>File permissions more permissive than 0600 for /etc/news/passwd.nntp may allow access to privileged information by system int...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
<GroupDescription></GroupDescription>Group -
The AIX /etc/group file must not have an extended ACL.
<VulnDiscussion>The "/etc/group" file contains information regarding groups that are configured on the system. Protection of this file is imp...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
<GroupDescription></GroupDescription>Group -
The AIX ldd command must be disabled.
<VulnDiscussion>The ldd command provides a list of dependent libraries needed by a given binary, which is useful for troubleshooting software...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
<GroupDescription></GroupDescription>Group -
AIX NFS server must be configured to restrict file system access to local hosts.
<VulnDiscussion>The NFS access option limits user access to the specified level. This assists in protecting exported file systems. If access ...Rule Medium Severity -
SRG-OS-000480-GPOS-00230
<GroupDescription></GroupDescription>Group -
All AIX users home directories must have mode 0750 or less permissive.
<VulnDiscussion>Excessive permissions on home directories allow unauthorized access to user files.</VulnDiscussion><FalsePositives&g...Rule Medium Severity -
SRG-OS-000480-GPOS-00230
<GroupDescription></GroupDescription>Group -
The AIX user home directories must not have extended ACLs.
<VulnDiscussion>Excessive permissions on home directories allow unauthorized access to user files.</VulnDiscussion><FalsePositives&g...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.