Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Network Information System (NIS) maps must be protected through hard-to-guess domain names.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-12026 | GEN006420 | SV-35153r1_rule | ECSC-1 | Medium |
| Description |
|---|
| The use of hard-to-guess NIS domain names provides additional protection from unauthorized access to the NIS directory information. |
| STIG | Date |
|---|---|
| HP-UX 11.31 Security Technical Implementation Guide | 2015-03-18 |
Details
| Check Text ( C-36722r2_chk ) |
|---|
| Check the domain name for NIS maps. Procedure: # domainname If the name returned is simple to guess, such as the organization name, building, or room name, etc., this is a finding. |
| Fix Text (F-32103r1_fix) |
|---|
| Change the NIS domain name to a value difficult to guess. Consult vendor documentation, i.e., domain name (1) in the HP-UX man pages, for the required procedure. |