IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

AIX NFS server must be configured to restrict file system access to local hosts.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

AIX NFS server must be configured to restrict file system access to local hosts.

Description

Discussion Text

The NFS access option limits user access to the specified level. This assists in protecting exported file systems. If access is not restricted, unauthorized hosts may be able to access the system's NFS exports.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215330

Rule

SV-215330r1268251_rule

Severity

medium

Rule Version

AIX7-00-003017

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the permissions on exported NFS file systems by running command: 

# exportfs -v 
/export/shared -ro,access=10.17.76.74

If the exported file systems do not contain the "rw" or "ro" options specifying a list of hosts or networks, this is a finding.

Implementation Procedure

Fix Text

Edit "/etc/exports" and add "ro" and/or "rw" options (as appropriate) specifying a list of hosts or networks which are permitted access. 

Re-export the file systems:
# /usr/sbin/exportfs -a

STIG check 157 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215329The AIX ldd command must be disabled.Next · V-215331 →All AIX users home directories must have mode 0750 or less permissive.