STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 1 hour ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215325

CAT II (Medium)

All system command files must not have extended ACLs.

Rule ID

SV-215325r991560_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-001499

Discussion

Restricting permissions will protect system command files from unauthorized modification. System command files include files present in directories used by the operating system for storing default system executables and files present in directories included in the system's default executable search paths.

Check Content

Verify all system command files have no extended ACLs by running the following commands:
# aclget /etc 
# aclget /bin 
# aclget /usr/bin 
# aclget /usr/lbin 
# aclget /usr/ucb 
# aclget /sbin 
# aclget /usr/sbin 

If any of the command files have extended permissions enabled, this is a finding.

Fix Text

Remove the extended ACL(s) from the system command file(s) and set the extended permissions to disabled by running the following command: 
# acledit [command-path ]/[ command-file]