IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

If there are no X11 clients that require CDE on AIX, the dt service must be disabled.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

If there are no X11 clients that require CDE on AIX, the dt service must be disabled.

Description

Discussion Text

This entry executes the CDE startup script which starts the AIX Common Desktop Environment.

To prevent attacks this daemon should not be enabled unless there is no alternative.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215351

Rule

SV-215351r958478_rule

Severity

medium

Rule Version

AIX7-00-003045

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

From the command prompt, execute the following command:
# lsitab dt

If the command yields any output, this is a finding.

Implementation Procedure

Fix Text

In "/etc/inittab", remove the "dt" entry by running the following command:
# rmitab dt

To request the init command to re-examine the "/etc/inittab" file, enter: 
# telinit q

STIG check 177 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215350If AIX system does not support either local or remote printing, the piobe service must be disabled.Next · V-215352 →If NFS is not required on AIX, the NFS daemon must be disabled.