STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

If csh/tcsh shell is used, AIX must display logout messages.

DISA Rule

SV-215311r508663_rule

Vulnerability Number

V-215311

Group Title

SRG-OS-000281-GPOS-00111

Rule Version

AIX7-00-002130

Severity

CAT III

CCI(s)

• CCI-002364 - The information system displays an explicit logout message to users indicating the reliable termination of authenticated communications sessions.

Weight

10

Fix Recommendation

Create the ".logout" file if it does not exist.

Add the following two lines to ".logout" to display a logout message and sleep for "5" seconds:
echo "You are being disconnected."
sleep 5

Check Contents

Check if users have their "$HOME/.logout" files.

If a user does not have their ".logout" file, or the ".logout" file does not display a logout message, this is a finding.

Vulnerability Number

V-215311

Documentable

False

Rule Version

AIX7-00-002130

Severity Override Guidance

Check if users have their "$HOME/.logout" files.

If a user does not have their ".logout" file, or the ".logout" file does not display a logout message, this is a finding.

Check Content Reference

M

Target Key

4012

Comments