Skip to content
ATO Pathways
  Log In

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The global initialization file lists of preloaded libraries must contain only absolute paths on AIX.

    &lt;VulnDiscussion&gt;The library preload list environment variable contains a list of libraries for the dynamic linker to load before loading the ...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The local initialization file library search paths must contain only absolute paths on AIX.

    &lt;VulnDiscussion&gt;The library search path environment variable(s) contain a list of directories for the dynamic linker to search to find librar...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The local initialization file lists of preloaded libraries must contain only absolute paths on AIX.

    &lt;VulnDiscussion&gt;The library preload list environment variable contains a list of libraries for the dynamic linker to load before loading the ...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • AIX package management tool must be used daily to verify system software.

    &lt;VulnDiscussion&gt;Verification using the system package management tool can be used to determine that system software has not been tampered wit...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The AIX DHCP client must not send dynamic DNS updates.

    &lt;VulnDiscussion&gt;Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unl...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • AIX must not run any routing protocol daemons unless the system is a router.

    &lt;VulnDiscussion&gt;Routing protocol daemons are typically used on routers to exchange network topology information with other routers. If this s...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • AIX must not process ICMP timestamp requests.

    &lt;VulnDiscussion&gt;The processing of Internet Control Message Protocol (ICMP) timestamp requests increases the attack surface of the system.&lt;...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • AIX must not respond to ICMPv6 echo requests sent to a broadcast address.

    &lt;VulnDiscussion&gt;Responding to broadcast ICMP echo requests facilitates network mapping and provides a vector for amplification attacks.&lt;/V...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00228

    <GroupDescription></GroupDescription>
    Group
    Show

  • AIX must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

    &lt;VulnDiscussion&gt;Setting the most restrictive default permissions ensures that when new accounts are created they do not have unnecessary acce...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00229

    <GroupDescription></GroupDescription>
    Group
    Show

  • There must be no .rhosts, .shosts, hosts.equiv, or shosts.equiv files on the AIX system.

    &lt;VulnDiscussion&gt;Trust files are convenient, but when used in conjunction with the remote login services, they can allow unauthenticated acces...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules