IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

AIX passwd.nntp file must have mode 0600 or less permissive.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

AIX passwd.nntp file must have mode 0600 or less permissive.

Description

Discussion Text

File permissions more permissive than 0600 for /etc/news/passwd.nntp may allow access to privileged information by system intruders or malicious users.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215327

Rule

SV-215327r1268251_rule

Severity

medium

Rule Version

AIX7-00-003013

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If NNTP is not being used, this is Not Applicable.

Check passwd.nntp file permissions using command:
# find / -name passwd.nntp -exec ls -lL {} \; 

The above command may yield the following output:
-rw-------    1 root     system           19 Oct 16 10:46 /etc/news/passwd.nntp

If a "passwd.nntp" file has a mode more permissive than "0600", this is a finding.

Implementation Procedure

Fix Text

Change the mode of all the found passwd.nntp files that have mode more permissive than "0600" using command: 
# chmod 0600 <passwd.nntp_file>

STIG check 154 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215326All library files must not have extended ACLs.Next · V-215328 →The AIX /etc/group file must not have an extended ACL.