Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
  • AIX audit logs must be rotated daily.

    &lt;VulnDiscussion&gt;Rotate audit logs daily to preserve audit file system space and to conform to the DoD/DISA requirement. If it is not rotated ...
    Rule Medium Severity
  • SRG-OS-000074-GPOS-00042

    <GroupDescription></GroupDescription>
    Group
  • The AIX rexec daemon must not be running.

    &lt;VulnDiscussion&gt;The exec service is used to execute a command sent from a remote server. The username and passwords are passed over the netwo...
    Rule High Severity
  • SRG-OS-000074-GPOS-00042

    <GroupDescription></GroupDescription>
    Group
  • AIX telnet daemon must not be running.

    &lt;VulnDiscussion&gt;This telnet service is used to service remote user connections. This is historically the most commonly used remote access met...
    Rule High Severity
  • SRG-OS-000074-GPOS-00042

    <GroupDescription></GroupDescription>
    Group
  • AIX ftpd daemon must not be running.

    &lt;VulnDiscussion&gt;The ftp service is used to transfer files from or to a remote machine. The username and passwords are passed over the network...
    Rule High Severity
  • SRG-OS-000373-GPOS-00156

    <GroupDescription></GroupDescription>
    Group
  • AIX must remove NOPASSWD tag from sudo config files.

    &lt;VulnDiscussion&gt;sudo command does not require reauthentication if NOPASSWD tag is specified in /etc/sudoers config file, or sudoers files in ...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules