AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE

ID	Vuln ID	Title	Cat
GEN006340	V-4277	Files in /etc/news must be owned by root or news.	Cat II
GEN006360	V-4278	The files in /etc/news must be group-owned by system or news.	Cat II
GEN006380	V-4399	The system must not use UDP for NIS/NIS+.	Cat I
GEN006400	V-867	The Network Information System (NIS) protocol must not be used.	Cat II
GEN006420	V-12026	NIS maps must be protected through hard-to-guess domain names.	Cat II
GEN006460	V-926	Any NIS+ server must be operating at security level 2.	Cat II
GEN006480	V-782	The system must have a host-based intrusion detection tool installed.	Cat II
GEN006560	V-12028	The system vulnerability assessment tool, host-based intrusion detection tool, and file integrity tool must notify the SA and the IAO of a security breach or a suspected security breach.	Cat II
GEN006565	V-22506	The system package management tool must be used to verify system software periodically.	Cat II
GEN006570	V-22507	The file integrity tool must be configured to verify ACLs.	Cat III
GEN006571	V-22508	The file integrity tool must be configured to verify extended attributes.	Cat III
GEN006575	V-22509	The file integrity tool must use FIPS 140-2 approved cryptographic hashes for validating file contents.	Cat III
GEN006580	V-940	The system must use an access control program.	Cat II
GEN006620	V-12030	The system's access control program must be configured to grant or deny system access to specific hosts.	Cat II
GEN006640	V-12765	The system must use a virus scan program.	Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.