IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

AIX must remove all software components after updated versions have been installed.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

AIX must remove all software components after updated versions have been installed.

Description

Discussion Text

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may remove older versions of software automatically from the information system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215336

Rule

SV-215336r958936_rule

Severity

medium

Rule Version

AIX7-00-003028

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Run the following command to check any installed components that are in APPLY state:
# lslpp -cl | grep :APPLIED:

If the command returns any entries, this is a finding.

Implementation Procedure

Fix Text

Run the following command to commit any applied components:
# installp -c all

STIG check 163 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215335AIX must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.Next · V-215337 →AIX must enforce a delay of at least 4 seconds between login prompts following a failed login attempt.