Check: GEN006420
HP-UX 11.31 STIG:
GEN006420
(in versions v1 r19 through v1 r13)
Title
Network Information System (NIS) maps must be protected through hard-to-guess domain names. (Cat II impact)
Discussion
The use of hard-to-guess NIS domain names provides additional protection from unauthorized access to the NIS directory information.
Check Content
Check the domain name for NIS maps. Procedure: # domainname If the name returned is simple to guess, such as the organization name, building, or room name, etc., this is a finding.
Fix Text
Change the NIS domain name to a value difficult to guess. Consult vendor documentation, i.e., domain name (1) in the HP-UX man pages, for the required procedure.
Additional Identifiers
Rule ID: SV-35153r1_rule
Vulnerability ID: V-12026
Group Title: GEN006420
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
Number | Title |
---|---|
CM-6 |
Configuration Settings |