IBM AIX 7.x Security Technical Implementation Guide

The IBM AIX 7.x Security Technical Implementation Guide (V3 R4) has 282 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

282STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R4

CurrentPublished Wed Sep 30 2026

If automated file system mounting tool is not required on AIX, it must be disabled.

IBM AIX 7.x Security Technical Implementation Guide

Assessment Title

Rule Text

If automated file system mounting tool is not required on AIX, it must be disabled.

Description

Discussion Text

Automated file system mounting tools may provide unprivileged users with the ability to access local media and network shares. If this access is not necessary for the system’s operation, it must be disabled to reduce the risk of unauthorized access to these resources.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-215395

Rule

SV-215395r958820_rule

Severity

medium

Rule Version

AIX7-00-003090

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if the system uses "automated" by using command:

# lssrc -s automountd
Subsystem         Group            PID          Status
automountd       autofs                        inoperative

If the automountd process is active, this is a finding.

Implementation Procedure

Fix Text

Disable the automated file system mounting tools. 

Empty the /etc/auto_master file.

From the command prompt, run the following command:
# stopsrc -s automountd

STIG check 221 of 282 in the IBM AIX 7.x STIG checklist

← Previous · V-215394The Reliable Datagram Sockets (RDS) protocol must be disabled on AIX.Next · V-215396 →AIX process core dumps must be disabled.