Unix-AppxB-121302 MSE安全攻防资料 checklist.docVIP

esm SECURITY POLICY This section details the ESM security policy configuration. UNIX Current Checked Old Checked STIG Module/Security =X =X Paragraph 1. Account Integrity User to Check - User to Check Empty Empty Account Login Shells X X - User to Skip Empty Empty Home Directories X X - User to Skip Empty Empty Show List of Users Group IDs X X Check Local Disks Only New Accounts Deleted Accounts Changed Accounts New Groups Deleted Groups Changed Groups Duplicate IDs X X Privileged Users and Groups X X User to Check Empty Empty 2. File Access Files to Check - Files to Check Empty Included /etc/passwd /etc/group /etc/exports /etc/shadow User to Check - User to Check Empty Empty Read Permissions X Write Permissions X Execute Permissions X 3. File Attributes Template File List X X - fileatt File - HP-UX-10.xx X X - fileatt File - HP-UX X X - fileatt File - Solaris X X - internet File - HP-UX - 10.xx X X - internet File - HP-UX X X - internet File - Solaris X X - mail File - HP-UX - 10.xx X X - mail File - HP-UX X X - mail File - Solaris X X - nfs File - HP-UX - 10.xx X X - nfs File - HP-UX X X - nfs File - Solaris X X - objects File - HP-UX - 10.xx X X - objects File - HP-UX X X - objects File - Solaris X X - queues File - HP-UX - 10.xx X X - queues File - HP-UX X X - queues File - Solaris X X - sysstart File - HP-UX - 10.xx X X - sysstart File - HP-UX X X - sysstart File - Solaris X X - uucp File - HP-UX - 10.xx X X - uucp File - HP-UX X X - uucp File - Solaris X X Check File User Ownership X X Check File Group Ownership X X Check File Permissions X X Check File Creation Time X X Check File Modification Time X X Perform Cyclic Redundancy Check (CRC) X X Allow Any Privileged User X X Allow Any Privileged Group X X Do Not Notify If File Permissions