Skip to content

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • AIX must enforce a delay of at least 4 seconds between login prompts following a failed login attempt.

    <VulnDiscussion>Limiting the number of login attempts over a certain time interval reduces the chances that an unauthorized user may gain acc...
    Rule Medium Severity
  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
  • AIX system must restrict the ability to switch to the root user to members of a defined group.

    &lt;VulnDiscussion&gt;Configuring a supplemental group for users permitted to switch to the root user prevents unauthorized users from accessing th...
    Rule Medium Severity
  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
  • All AIX Group Identifiers (GIDs) referenced in the /etc/passwd file must be defined in the /etc/group file.

    &lt;VulnDiscussion&gt;If a user is assigned the GID of a group not existing on the system, and a group with that GID is subsequently created, the u...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules