STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 3 Release: 3 Benchmark Date: 01 Jul 2026:

AIX must turn on enhanced Role-Based Access Control (RBAC) to isolate security functions from nonsecurity functions, to grant system privileges to other operating system admins, and prohibit user installation of system software without explicit privileged status.

DISA Rule

SV-215404r1137691_rule

Vulnerability Number

V-215404

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

AIX7-00-003102

Severity

CAT II

CCI(s)

CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.
CCI-001084 - Isolate security functions from nonsecurity functions.
CCI-003980 - Allow user installation of software only with explicit privileged status.
CCI-002165 - Enforce organization-defined discretionary access control policies over defined subjects and objects.

Weight

Fix Recommendation

Enable the enhanced RBAC mode by running the following command:
# chdev -l sys0 -a enhanced_RBAC=true

Reboot the system:
# reboot

Check Contents

Run the following command to retrieve the system RBAC mode:
# lsattr -E -l sys0 -a enhanced_RBAC
enhanced_RBAC true Enhanced RBAC Mode

If the RBAC mode is not "true", this is a finding.

Vulnerability Number

V-215404

Documentable

False

Rule Version

AIX7-00-003102

Severity Override Guidance

Run the following command to retrieve the system RBAC mode:
# lsattr -E -l sys0 -a enhanced_RBAC
enhanced_RBAC true Enhanced RBAC Mode

If the RBAC mode is not "true", this is a finding.

Check Content Reference

Target Key

4012