IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

All AIX Group Identifiers (GIDs) referenced in the /etc/passwd file must be defined in the /etc/group file.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

All AIX Group Identifiers (GIDs) referenced in the /etc/passwd file must be defined in the /etc/group file.

Description

Discussion Text

If a user is assigned the GID of a group not existing on the system, and a group with that GID is subsequently created, the user may have unintended rights to the group.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215339

Rule

SV-215339r1268251_rule

Severity

medium

Rule Version

AIX7-00-003033

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify that there are no GIDs referenced in "/etc/passwd" that are not defined in "/etc/group":

# cut -d: -f4 /etc/passwd
0
1
2
3
4
203
204

# cut -d: -f3 /etc/group
0
1
2
3
4
203
204

If there are GID's listed in the "/etc/passwd" file that are not listed in the "/etc/group" file, this is a finding.

Implementation Procedure

Fix Text

Add a group to the system for each GID referenced without a corresponding group by running "mkgroup" command.

STIG check 166 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215338AIX system must restrict the ability to switch to the root user to members of a defined group.Next · V-215340 →All AIX files and directories must have a valid owner.