I - Mission Critical Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The rquotad daemon must be disabled on AIX.
<VulnDiscussion>The rquotad service allows NFS clients to enforce disk quotas on file systems that are mounted on the local system. This serv...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The tftp daemon must be disabled on AIX.
<VulnDiscussion>The tftp service allows remote systems to download or upload files to the tftp server without any authentication. It is there...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The imap2 service must be disabled on AIX.
<VulnDiscussion>The imap2 service or Internet Message Access Protocol (IMAP) supports the IMAP4 remote mail access protocol. It works with se...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The pop3 daemon must be disabled on AIX.
<VulnDiscussion>The pop3 service provides a pop3 server. It supports the pop3 remote mail access protocol. It works with sendmail and bellmai...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The finger daemon must be disabled on AIX.
<VulnDiscussion>The fingerd daemon provides the server function for the finger command. This allows users to view real-time pertinent user lo...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The instsrv daemon must be disabled on AIX.
<VulnDiscussion>The instsrv service is part of the Network Installation Tools, used for servicing servers running AIX 3.2. This service shoul...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The echo daemon must be disabled on AIX.
<VulnDiscussion>The echo service can be used in Denial of Service or SMURF attacks. It can also be used by someone else to get through a fire...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The Internet Network News (INN) server must be disabled on AIX.
<VulnDiscussion>Internet Network News (INN) servers access Usenet newsfeeds and store newsgroup articles. INN servers use the Network News Tr...Rule Medium Severity -
SRG-OS-000096-GPOS-00050
<GroupDescription></GroupDescription>Group -
If Stream Control Transmission Protocol (SCTP) must be disabled on AIX.
<VulnDiscussion>The Stream Control Transmission Protocol (SCTP) is an IETF-standardized transport layer protocol. This protocol is not yet wi...Rule Medium Severity -
SRG-OS-000096-GPOS-00050
<GroupDescription></GroupDescription>Group -
The Reliable Datagram Sockets (RDS) protocol must be disabled on AIX.
<VulnDiscussion>The Reliable Datagram Sockets (RDS) protocol is a relatively new protocol developed by Oracle for communication between the n...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.