<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:aix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix" xmlns:hpux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:linux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:macos-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:sol-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:win-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 mcafee-pa-oval-definitions-schema-1.0.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris solaris-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#macos macos-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux hpux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#aix aix-definitions-schema.xsd">
  <generator>
    <oval:product_name>McAfee's OvalZilla</oval:product_name>
    <oval:product_version>Version 1.0</oval:product_version>
    <oval:schema_version>5.3</oval:schema_version>
    <oval:timestamp>2026-03-01T05:44:23-06:00</oval:timestamp>
  </generator>
  <definitions>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:405" version="10">
      <metadata>
        <title>The system must not have the rstatd service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The rstatd can give out information on the running system such as the CPU usage, the system uptime, its network usage and other system information that could potentially aid in an attack. The rstatd service is unnecessary and it weakens the defensive posture of the system. If systems monitoring is needed, use a third party tool or snmp.
</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion comment="rstatd daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:40500" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:404" version="10">
      <metadata>
        <title>The system must not have the sprayd service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The sprayd service is sometimes used for network and nfs troubleshooting. The spray service can be used for both buffer overflow and Denial of Service attacks by saturating the network. The sprayd daemon is an unnecessary service.
</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion comment="sprayd daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:40400" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:403" version="10">
      <metadata>
        <title>The system must not have the rusersd service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The rusersd daemon gives out a list of current uses on the system. The rusersd daemon is unnecessary and it increases the attack vector of the system by providing information on the current users of the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion comment="rusersd daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:40300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:402" version="10">
      <metadata>
        <title>The /etc/inetd time service must not be active on the system on the inetd daemon.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The time service is an internal inetd function is used by the rdate command.  This service is sometimes used to synchronize clocks at boot time. The service is outdated. Use the ntpdate command instead.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="time daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:40200" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:401" version="10">
      <metadata>
        <title>The system must not have the systat service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The systat daemon allows remote users to see the running process and who is running them. This may aid in information collection for an attack and weaken the security posture of the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="systat service not running" test_ref="oval:mil.disa.fso.aix11:tst:40100" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:400" version="10">
      <metadata>
        <title>The system must not have the PCNFS service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The PCNFS service predates Microsoft’s SMB specifications. If a similar service is needed to share files from a Windows based OS to a UNIX based OS, consider SAMBA.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="pcnfs daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:40000" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:399" version="10">
      <metadata>
        <title>The system must not have the netstat service active on the inetd process.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The netstat service can potentially give out network information on active connections if it is running. The information given out can aid in an attack and weaken the systems defensive posture.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="netstat service not running" test_ref="oval:mil.disa.fso.aix11:tst:39900" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:398" version="10">
      <metadata>
        <title>The system must not have the talk or ntalk services active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The talk and ntalk commands allow users on the same or different systems on converse. The talk daemons are started from the inetd process and run as root. These unnecessary processes increase the attack vector of the system and may cause Denial of Service by scrambling the users display.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="talk daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39800" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:397" version="10">
      <metadata>
        <title>The system must not have the PostOffice Protocol (POP3) service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The POP3 service is only needed if the server is acting as a mail server and clients are using applications that only support POP3. Users' ids and passwords are sent in plain text to the POP3 service. If mail client access is needed, consider using IMAP or SSL enabled POP3.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="pop3 daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39700" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:396" version="10">
      <metadata>
        <title>The system must not have Internet Message Access Protocol (IMAP) service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The IMAP service should not be running unless the system is acting as a mail server for client connections. Running unnecessary services increases the attack vector on the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="imap daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39600" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:395" version="10">
      <metadata>
        <title>The system must not have the echo service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The echo service can be used in Denial of Service or SMURF attacks. It can also used at someone else to get through a firewall or start a data storm. The echo service is unnecessary and it increases the attack vector of the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="echo daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39500" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:394" version="10">
      <metadata>
        <title>The system must not have dtspc service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
This service is started automatically by the inetd daemon with root permission in response to a CDE client requesting a process to be started on the daemon's host system. Running the dtscp service is unnecessary and it increases the attack vector of the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="dtspc daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39400" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:393" version="10">
      <metadata>
        <title>The system must not have the discard service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The discard service runs as root from the inetd server and can be used in Denial of Service attacks. The discard service is unnecessary and it increases the attack vector of the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="discard daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39300" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:392" version="10">
      <metadata>
        <title>The system must not have the daytime service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The daytime service runs as root from the inetd daemon and can provide an opportunity for Denial of Service PING or PING-PONG attacks. The daytime service is unnecessary and it increases the attack vector of the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="daytime daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39200" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:391" version="10">
      <metadata>
        <title>The system must not have the comsat service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The comsat daemon notifies users on incoming email. This is an unnecessary service and is vulnerable to a flood attack. Running unnecessary services increases the attack vector of the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="comsat daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39100" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:390" version="10">
      <metadata>
        <title>The system must not have the tool-talk database server (ttdbserver) service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The ttdbserver service for CDE is an unnecessary service that runs as root and might be compromised.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ttdbserver daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:39000" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:389" version="10">
      <metadata>
        <title>The system must not have the Calendar Manager Service Daemon (CMSD) service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The CMSD service for CDE is an unnecessary process that runs a root and increases attack vector of the system. Buffer overflow attacks against the CMSD process can potentially give access to the system.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="cmsd daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:38900" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:388" version="10">
      <metadata>
        <title>The system must not have the chargen service active.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
When contacted, chargen responds with some random characters. When contacted via UDP, it will respond with a single UDP packet. When contacted via TCP, it will continue spewing characters until the client closes the connection. An easy attack is 'ping-pong' in which an attacker spoofs a packet between two machines running chargen. This will cause them to spew characters at each other, slowing the machines down and saturating the network. The chargen service is unnecessary and provides an opportunity for DoS attack.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="chargen daemon not running" test_ref="oval:mil.disa.fso.aix11:tst:38800" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:375" version="10">
      <metadata>
        <title>The group owner of the /etc/security/ldap/ldap.cfg file</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The group owner of the /etc/security/ldap/ldap.cfg file
</description>
      </metadata>
      <criteria>
        <criterion comment="Check group-ownership /etc/security/ldap/ldap.cfg" test_ref="oval:mil.disa.fso.aix11:tst:37500" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:374" version="10">
      <metadata>
        <title>If the system is using LDAP for authentication or account information, the /etc/ldap.conf (or equivalent) file must be owned by root.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test owner of /etc/security/ldap/ldap.cfg is root" test_ref="oval:mil.disa.fso.aix11:tst:37400" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:373" version="10">
      <metadata>
        <title>If the system is using LDAP for authentication or account information the /etc/ldap.conf (or equivalent) file must have mode 0644 or less permissive.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test mode of /etc/security/ldap/ldap.cfg is 644 or less permissive" test_ref="oval:mil.disa.fso.aix11:tst:37300" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:369" version="10">
      <metadata>
        <title>The system must not accept source-routed IPv6 packets.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The system must not accept source-routed IPv6 packets.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ipsrcrouterecv = 0" test_ref="oval:mil.disa.fso.aix11:tst:36900" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:368" version="10">
      <metadata>
        <title>The system must not forward IPv6 source-routed packets.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The system must not forward IPv6 source-routed packets.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ip6srcrouteforward = 0" test_ref="oval:mil.disa.fso.aix11:tst:36800" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:367" version="10">
      <metadata>
        <title>The system must not send IPv6 ICMP redirects.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The system must not send IPv6 ICMP redirects.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ipsendredirects = 0" test_ref="oval:mil.disa.fso.aix11:tst:36700" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:366" version="10">
      <metadata>
        <title>The system must ignore IPv6 ICMP redirect messages.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The system must ignore IPv6 ICMP redirect messages.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ipignoreredirects = 1" test_ref="oval:mil.disa.fso.aix11:tst:36600" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:365" version="10">
      <metadata>
        <title>The DHCP client must not send dynamic DNS updates.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unless needed.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="The DHCP client does not send dynamic DNS updates." test_ref="oval:mil.disa.fso.aix11:tst:36500" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:364" version="10">
      <metadata>
        <title>The DHCP client must be disabled if not needed.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
DHCP allows for the unauthenticated configuration of network parameters on the system by exchanging information with a DHCP server.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="There must be no DHCP client running." test_ref="oval:mil.disa.fso.aix11:tst:36400" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:361" version="10">
      <metadata>
        <title>The system's access control program must be configured to grant or deny system access to specific hosts.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
If the system's access control program is not configured with appropriate rules for allowing and denying access to system network resources, services may be accessible to unauthorized hosts.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="/etc/hosts.allow and /etc/hosts.deny files exist" test_ref="oval:mil.disa.fso.aix11:tst:36100" />
        <criterion comment="There is a default deny all entry in /etc/hosts.deny" test_ref="oval:mil.disa.fso.aix11:tst:36101" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:345" version="10">
      <metadata>
        <title>The smbpasswd file must have mode 0600 or less permissive</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The smbpasswd file must have mode 0600 or less permissive
</description>
      </metadata>
      <criteria>
        <criterion comment="Check smbpasswd file permissions" test_ref="oval:mil.disa.fso.aix11:tst:34500" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:344" version="10">
      <metadata>
        <title>The smbpasswd file must be group-owned by system or sys</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The smbpasswd file must be group-owned by system or sys
</description>
      </metadata>
      <criteria>
        <criterion comment="Check group-ownership smbpasswd file" test_ref="oval:mil.disa.fso.aix11:tst:34400" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:343" version="10">
      <metadata>
        <title>The smbpasswd file must be owned by root</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The smbpasswd file must be owned by root
</description>
      </metadata>
      <criteria>
        <criterion comment="Check ownership smbpasswd file" test_ref="oval:mil.disa.fso.aix11:tst:34300" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:342" version="10">
      <metadata>
        <title>The smb.conf file must have mode 0644 or less permissive</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The smb.conf file must have mode 0644 or less permissive
</description>
      </metadata>
      <criteria>
        <criterion comment="Check smb.conf file permissions" test_ref="oval:mil.disa.fso.aix11:tst:34200" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:341" version="10">
      <metadata>
        <title>The smb.conf file must be group-owned by system, bin, or sys</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The smb.conf file must be group-owned by system, bin, or sys
</description>
      </metadata>
      <criteria>
        <criterion comment="Check group-ownership smb.conf file" test_ref="oval:mil.disa.fso.aix11:tst:34100" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:340" version="10">
      <metadata>
        <title>The smb.conf file must be owned by root</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The smb.conf file must be owned by root
</description>
      </metadata>
      <criteria>
        <criterion comment="Check ownership smb.conf file" test_ref="oval:mil.disa.fso.aix11:tst:34000" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:333" version="10">
      <metadata>
        <title>The NFS export configuration file must have mode 0644 or less permissive.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test mode of /etc/exports is 644 or less permissive" test_ref="oval:mil.disa.fso.aix11:tst:33300" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:331" version="10">
      <metadata>
        <title>The NFS export configuration file must be owned by root.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test owner of /etc/exports is root" test_ref="oval:mil.disa.fso.aix11:tst:33100" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:327" version="10">
      <metadata>
        <title>The SSH daemon must not allow compression or must only allow compression after successful authentication.</title>
        <description>
If compression is allowed in an SSH connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection, potentially with root priveleges.
</description>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
      </metadata>
      <criteria>
        <criterion comment="Compression Setting OK" test_ref="oval:mil.disa.fso.aix11:tst:32700" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:326" version="10">
      <metadata>
        <title>The SSH daemon must not allow rhosts RSA authentication.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
If SSH permits rhosts RSA authentication, a user may be able to log in based on the keys of the host originating the request and not any user-specific authentication.
</description>
      </metadata>
      <criteria comment="The SSH daemon must not allow rhosts RSA authentication.">
        <criterion comment="RhostsRSAAuthentication Setting OK" test_ref="oval:mil.disa.fso.aix11:tst:32600" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:325" version="10">
      <metadata>
        <title>The SSH daemon must use privilege separation.</title>
        <description>
SSH daemon privilege separation causes the SSH process to drop root privileges when not needed, which would decrease the impact of software vulnerabilities in the unprivileged section.
</description>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
      </metadata>
      <criteria>
        <criterion comment="UsePrivilegeSeparation Setting OK" test_ref="oval:mil.disa.fso.aix11:tst:32500" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:324" version="10">
      <metadata>
        <title>The SSH daemon must perform strict mode checking of home directory configuration files.</title>
        <description>
If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.
</description>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
      </metadata>
      <criteria>
        <criterion comment="StrictModes Setting OK" test_ref="oval:mil.disa.fso.aix11:tst:32400" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:316" version="10">
      <metadata>
        <title>The SSH daemon must not permit Kerberos authentication unless needed.</title>
        <description>
Kerberos authentication for SSH is often implemented using GSSAPI.  If Kerberos is enabled through SSH, the SSH daemon provides a means of access to the system's Kerberos implementation.  Vulnerabilities in the system's Kerberos implementation may then be subject to exploitation.  To reduce the attack surface of the system, the Kerberos authentication mechanism within SSH must be disabled for systems not using this capability.
</description>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
      </metadata>
      <criteria>
        <criterion comment="SSH daemon is configured to disallow Kerberos authentication" test_ref="oval:mil.disa.fso.aix11:tst:31600" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:315" version="10">
      <metadata>
        <title>The SSH client must not permit GSSAPI authentication unless needed.</title>
        <description>
GSSAPI authentication is used to provide additional authentication mechanisms to applications. Allowing GSSAPI authentication through SSH exposes the system’s GSSAPI to remote hosts, increasing the attack surface of the system. GSSAPI authentication must be disabled unless needed.
</description>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
      </metadata>
      <criteria>
        <criterion comment="SSH client is configured to disallow GSSAPI authentication" test_ref="oval:mil.disa.fso.aix11:tst:31500" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:314" version="10">
      <metadata>
        <title>The SSH daemon must not permit GSSAPI authentication unless needed.</title>
        <description>
GSSAPI authentication is used to provide additional authentication mechanisms to applications. Allowing GSSAPI authentication through SSH exposes the system’s GSSAPI to remote hosts, increasing the attack surface of the system.  GSSAPI authentication must be disabled unless needed.
</description>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
      </metadata>
      <criteria>
        <criterion comment="SSH daemon is configured to disallow GSSAPI authentication" test_ref="oval:mil.disa.fso.aix11:tst:31400" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:313" version="10">
      <metadata>
        <title>The SSH private host key files must have mode 0600 or less permissive.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test mode of /etc/ssh/*key is 600 or less permissive" test_ref="oval:mil.disa.fso.aix11:tst:31300" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:312" version="10">
      <metadata>
        <title>The SSH public host key files must have mode 0644 or less permissive.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
If a public host key file is modified by an unauthorized user, the SSH service may be compromised.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="/etc/ssh/*key.pub has mode 0644 or less" test_ref="oval:mil.disa.fso.aix11:tst:31200" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:311" version="10">
      <metadata>
        <title>The SSH daemon must restrict login ability to specific users and/or groups.</title>
        <description>
Restricting SSH logins to a limited group of users, such as system administrators, prevents password-guessing and other SSH attacks from reaching system accounts and other accounts not authorized for SSH access.
</description>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="SSH daemon is configured to restrict logins to specific users and/or groups" test_ref="oval:mil.disa.fso.aix11:tst:31100" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:304" version="10">
      <metadata>
        <title>The SSH client must be configured to only use message authentication codes (MACs) that employ FIPS 140-2 approved cryptographic hash algorithms.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
DoD information systems are required to use FIPS 140-2 approved cryptographic hash functions.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ssh_config uses approved hash function" test_ref="oval:mil.disa.fso.aix11:tst:30400" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:303" version="10">
      <metadata>
        <title>The SSH client must be configured to not use CBC-based ciphers.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The cipher-block chaining (CBC) mode of encryption as implemented in the SSHv2 protocol is vulnerable to chosen plain text attacks and must not be used.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="ssh_config does not use CBC ciphers" test_ref="oval:mil.disa.fso.aix11:tst:30300" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:297" version="1">
      <metadata>
        <title>The SSH daemon must be configured to only use the SSHv2 protocol.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test Protocol in /etc/sshd_config is 2" test_ref="oval:mil.disa.fso.aix11:tst:29700" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:292" version="10">
      <metadata>
        <title>The /etc/syslog.conf file must be group-owned by root, bin, sys, or system.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Test group ownership of /etc/syslog.conf" operator="OR">
          <criterion comment="Test group of /etc/syslog.conf is root" test_ref="oval:mil.disa.fso.aix11:tst:29200" />
          <criteria operator="AND">
            <criterion comment="Test existence of group bin" test_ref="oval:mil.disa.fso.aix11:tst:24602" />
            <criterion comment="Test group of /etc/syslog.conf is bin" test_ref="oval:mil.disa.fso.aix11:tst:29201" />
          </criteria>
          <criteria operator="AND">
            <criterion comment="Test existence of group sys" test_ref="oval:mil.disa.fso.aix11:tst:24600" />
            <criterion comment="Test group of /etc/syslog.conf is sys" test_ref="oval:mil.disa.fso.aix11:tst:29202" />
          </criteria>
          <criteria operator="AND">
            <criterion comment="Test existence of group system" test_ref="oval:mil.disa.fso.aix11:tst:24605" />
            <criterion comment="Test group of /etc/syslog.conf is system" test_ref="oval:mil.disa.fso.aix11:tst:29203" />
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:291" version="10">
      <metadata>
        <title>The /etc/syslog.conf file must be owned by root.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test owner of /etc/syslog.conf is root" test_ref="oval:mil.disa.fso.aix11:tst:29100" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:290" version="10">
      <metadata>
        <title>The /etc/syslog.conf file must have mode 0640 or less permissive.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test mode of /etc/syslog.conf is 640 or less permissive" test_ref="oval:mil.disa.fso.aix11:tst:29000" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:274" version="1">
      <metadata>
        <title>Anonymous FTP accounts must not have a functional shell.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion comment="Test for an anonymous ftp user in the /etc/passwd" test_ref="oval:mil.disa.fso.aix11:tst:27400" />
          <criteria operator="OR">
            <criterion comment="Test for /bin/false" test_ref="oval:mil.disa.fso.aix11:tst:27401" />
            <criterion comment="Test for /bin/true" test_ref="oval:mil.disa.fso.aix11:tst:27402" />
            <criterion comment="Test for /usr/bin/false" test_ref="oval:mil.disa.fso.aix11:tst:27403" />
            <criterion comment="Test for /dev/null" test_ref="oval:mil.disa.fso.aix11:tst:27404" />
            <criterion comment="Test for /sbin/nologin" test_ref="oval:mil.disa.fso.aix11:tst:27405" />
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:272" version="10">
      <metadata>
        <title>The ftpusers file must have mode 0640 or less permissive.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test mode of /etc/ftpusers is 640 or less permissive" test_ref="oval:mil.disa.fso.aix11:tst:27200" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:271" version="10">
      <metadata>
        <title>The ftpusers file must be group-owned by root, bin, sys, or system.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criteria comment="Test group ownership of /etc/ftpusers" operator="OR">
          <criterion comment="Test group of /etc/ftpusers is root" test_ref="oval:mil.disa.fso.aix11:tst:27100" />
          <criteria operator="AND">
            <criterion comment="Test existence of group bin" test_ref="oval:mil.disa.fso.aix11:tst:24602" />
            <criterion comment="Test group of /etc/ftpusers is bin" test_ref="oval:mil.disa.fso.aix11:tst:27101" />
          </criteria>
          <criteria operator="AND">
            <criterion comment="Test existence of group sys" test_ref="oval:mil.disa.fso.aix11:tst:24600" />
            <criterion comment="Test group of /etc/ftpusers is sys" test_ref="oval:mil.disa.fso.aix11:tst:27102" />
          </criteria>
          <criteria operator="AND">
            <criterion comment="Test existence of group system" test_ref="oval:mil.disa.fso.aix11:tst:24605" />
            <criterion comment="Test group of /etc/ftpusers is system" test_ref="oval:mil.disa.fso.aix11:tst:27103" />
          </criteria>
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:270" version="10">
      <metadata>
        <title>The ftpusers file must be owned by root.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test owner of /etc/ftpusers is root" test_ref="oval:mil.disa.fso.aix11:tst:27000" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:269" version="10">
      <metadata>
        <title>The ftpusers file</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The ftpusers file must exist
</description>
      </metadata>
      <criteria operator="AND">
        <criteria operator="OR">
          <criterion comment="ftp not installed" test_ref="oval:mil.disa.fso.aix11:tst:26900" />
          <criterion comment="ftpusers exists" test_ref="oval:mil.disa.fso.aix11:tst:26901" />
        </criteria>
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:262" version="10">
      <metadata>
        <title>The system must not use .forward files.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The system must not use .forward files.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="no .forward files" test_ref="oval:mil.disa.fso.aix11:tst:26200" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:251" version="10">
      <metadata>
        <title>aliases permissions</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The alias file must have mode 0644 or less permissive
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check /etc/mail/aliases permissions" test_ref="oval:mil.disa.fso.aix11:tst:25100" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:250" version="10">
      <metadata>
        <title>GEN004370</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
The aliases file must be group-owned by system, bin, sys
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Check group-ownership /etc/mail/aliases" test_ref="oval:mil.disa.fso.aix11:tst:25000" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:249" version="10">
      <metadata>
        <title>The alias file must be owned by root.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test owner of /etc/mail/aliases is root" test_ref="oval:mil.disa.fso.aix11:tst:24900" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:mil.disa.fso.aix11:def:247" version="10">
      <metadata>
        <title>The traceroute file must have mode 0700 or less permissive.</title>
        <affected family="unix">
          <platform>IBM AIX 6.1</platform>
        </affected>
        <description>
Tests for compliance with the requirement.
</description>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test mode of /usr/bin/traceroute is 700 or less permissive" test_ref="oval:mil.disa.fso.aix11:tst:24700" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:2939990" version="410">
      <metadata>
        <title>Test if the Access control files contain a plus sign - /etc/passwd</title>
        <description>
This check will verify if the Access control files contain a plus sign - /etc/passwd
</description>
        <reference ref_id="CCE-8667-8" source="CCE v5 - RHEL4" />
        <reference ref_id="9.4" source="CIS_Debian_Benchmark_v1.0" />
        <reference ref_id="9.2.2" source="CIS_Redhat_Linux_5_Benchmark_v2.0.0" />
        <reference ref_id="9.2.2" source="CIS_Red_Hat_Enterprise_Linux_5_Benchmark_v2.1.0" />
        <reference ref_id="6.2.2" source="CIS_Red_Hat_Enterprise_Linux_7_Benchmark_v2.1.0" />
        <reference ref_id="6.2.2" source="CIS_CentOS_Linux_7_Benchmark_v2.1.0" />
        <reference ref_id="6.2.2" source="CIS_Oracle_Linux_7_Benchmark_v2.0.0" />
        <reference ref_id="13.2" source="CIS_SUSE_Linux_Enterprise_Server_11_Benchmark_v1.1.0" />
        <reference ref_id="13.2" source="CIS_SUSE_Linux_Enterprise_Server_12_Benchmark_v1.0.0" />
        <reference ref_id="8" source="PCI_DSS_v3.0_Requirements" />
        <reference ref_id="2" source="PCI_DSS_v3.0_Requirements" />
        <reference ref_id="05284" source="UCF_control_id" />
        <reference ref_id="01584" source="UCF_control_id" />
        <reference ref_id="13.2" source="CIS_Debian_Linux_7_Benchmark_v1.0.0" />
        <reference ref_id="13.2" source="CIS_Debian_Linux_8_Benchmark_v1.0.0" />
        <reference ref_id="6.2.2" source="CIS_Red_Hat_Enterprise_Linux_6_Benchmark_v2.0.1" />
        <reference ref_id="6.2.2" source="CIS_CentOS_Linux_6_Benchmark_v2.0.1" />
        <reference ref_id="6.2.2" source="CIS_Oracle_Linux_6_Benchmark_v1.0.0" />
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>CentOS CentOS 6</platform>
          <platform>Oracle Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 8</platform>
          <platform>Debian Linux 8</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Access control files should not contain a plus sign - /etc/passwd" test_ref="oval:com.mcafee.oval:tst:50675" />
      </criteria>
    </definition>
    <definition class="compliance" id="oval:com.mcafee.oval:def:2939988" version="390">
      <metadata>
        <title>Test if the Access control files contain a plus sign - /etc/group</title>
        <description>
This check will verify if the Access control files contain a plus sign - /etc/group
</description>
        <reference ref_id="CCE-8658-7" source="CCE v5 - RHEL4" />
        <reference ref_id="9.4" source="CIS_Debian_Benchmark_v1.0" />
        <reference ref_id="2.4.4" source="CIS_IBM_AIX_5.3-6.1_Benchmark_v1.1.0" />
        <reference ref_id="9.2.4" source="CIS_Redhat_Linux_5_Benchmark_v2.0.0" />
        <reference ref_id="9.2.4" source="CIS_Red_Hat_Enterprise_Linux_5_Benchmark_v2.1.0" />
        <reference ref_id="Requirement 7" source="PCI_DSS_v3" />
        <reference ref_id="6.2.4" source="CIS_Red_Hat_Enterprise_Linux_7_Benchmark_v2.1.0" />
        <reference ref_id="6.2.4" source="CIS_CentOS_Linux_7_Benchmark_v2.1.0" />
        <reference ref_id="6.2.4" source="CIS_Oracle_Linux_7_Benchmark_v2.0.0" />
        <reference ref_id="13.4" source="CIS_SUSE_Linux_Enterprise_Server_11_Benchmark_v1.1.0" />
        <reference ref_id="13.4" source="CIS_SUSE_Linux_Enterprise_Server_12_Benchmark_v1.0.0" />
        <reference ref_id="2" source="PCI_DSS_v3.0_Requirements" />
        <reference ref_id="01584" source="UCF_control_id" />
        <reference ref_id="13.4" source="CIS_Debian_Linux_7_Benchmark_v1.0.0" />
        <reference ref_id="13.4" source="CIS_Debian_Linux_8_Benchmark_v1.0.0" />
        <reference ref_id="6.2.4" source="CIS_Red_Hat_Enterprise_Linux_6_Benchmark_v2.0.1" />
        <reference ref_id="6.2.4" source="CIS_CentOS_Linux_6_Benchmark_v2.0.1" />
        <reference ref_id="6.2.4" source="CIS_Oracle_Linux_6_Benchmark_v1.0.0" />
        <affected family="unix">
          <platform>Red Hat Enterprise Linux 4</platform>
          <platform>Red Hat Enterprise Linux 5</platform>
          <platform>Red Hat Enterprise Linux 6</platform>
          <platform>Red Hat Enterprise Linux 3</platform>
          <platform>Novell SUSE Linux Enterprise Server 9</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 9, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 10</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 10, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 11</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x86</platform>
          <platform>Novell SUSE Linux Enterprise Server 11, x64</platform>
          <platform>Novell SUSE Linux Enterprise Server 12</platform>
          <platform>CentOS CentOS 4</platform>
          <platform>CentOS CentOS 4, x86</platform>
          <platform>CentOS CentOS 4, x64</platform>
          <platform>CentOS CentOS 5</platform>
          <platform>CentOS CentOS 5, x86</platform>
          <platform>CentOS CentOS 5, x64</platform>
          <platform>Debian GNU/Linux 5</platform>
          <platform>Debian GNU/Linux 6</platform>
          <platform>IBM AIX 5.3</platform>
          <platform>IBM AIX 6.1</platform>
          <platform>CentOS CentOS 6</platform>
          <platform>Oracle Linux 6</platform>
          <platform>Debian Linux 7</platform>
          <platform>Oracle Linux 7</platform>
          <platform>CentOS CentOS 7</platform>
          <platform>Red Hat Enterprise Linux 7</platform>
          <platform>Red Hat Enterprise Linux 8</platform>
          <platform>Debian Linux 8</platform>
        </affected>
      </metadata>
      <criteria operator="AND">
        <criterion comment="Test if the Access control files contain a plus sign - /etc/group" test_ref="oval:com.mcafee.oval:tst:50677" />
      </criteria>
    </definition>
  </definitions>
  <tests>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="rstatd daemon not running" id="oval:mil.disa.fso.aix11:tst:40500" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:40500" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:40500" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="sprayd daemon not running" id="oval:mil.disa.fso.aix11:tst:40400" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:40400" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:40400" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="rusersd daemon not running" id="oval:mil.disa.fso.aix11:tst:40300" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:40300" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:40300" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="time daemon not running" id="oval:mil.disa.fso.aix11:tst:40200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:40200" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:40200" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="systat service not running" id="oval:mil.disa.fso.aix11:tst:40100" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:40100" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:40100" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="pcnfs daemon not running" id="oval:mil.disa.fso.aix11:tst:40000" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:40000" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:40000" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="netstat service not running" id="oval:mil.disa.fso.aix11:tst:39900" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39900" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39900" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="talk daemon not running" id="oval:mil.disa.fso.aix11:tst:39800" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39800" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39800" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="pop3 daemon not running" id="oval:mil.disa.fso.aix11:tst:39700" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39700" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39700" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="imap daemon not running" id="oval:mil.disa.fso.aix11:tst:39600" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39600" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39600" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="echo daemon not running" id="oval:mil.disa.fso.aix11:tst:39500" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39500" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39500" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="dtspc daemon not running" id="oval:mil.disa.fso.aix11:tst:39400" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39400" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39400" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="discard daemon not running" id="oval:mil.disa.fso.aix11:tst:39300" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39300" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39300" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="daytime daemon not running" id="oval:mil.disa.fso.aix11:tst:39200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39200" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39200" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="comsat daemon not running" id="oval:mil.disa.fso.aix11:tst:39100" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39100" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39100" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="ttdbserver daemon not running" id="oval:mil.disa.fso.aix11:tst:39000" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:39000" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:39000" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="cmsd daemon not running" id="oval:mil.disa.fso.aix11:tst:38900" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:38900" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:38900" />
    </unix-def:inetd_test>
    <unix-def:inetd_test check="none satisfy" check_existence="any_exist" comment="chargen daemon not running" id="oval:mil.disa.fso.aix11:tst:38800" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:38800" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:38800" />
    </unix-def:inetd_test>
    <file_test check="all" check_existence="any_exist" comment="Check group-ownership /etc/security/ldap/ldap.cfg" id="oval:mil.disa.fso.aix11:tst:37500" state_operator="OR" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:37500" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34110" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34111" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34112" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:11210" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test owner of /etc/security/ldap/ldap.cfg is root" id="oval:mil.disa.fso.aix11:tst:37400" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:37300" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:9500" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test mode of /etc/security/ldap/ldap.cfg is 644 or less permissive" id="oval:mil.disa.fso.aix11:tst:37300" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:37300" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:11400" />
    </file_test>
    <independent-def:textfilecontent54_test check="all" check_existence="any_exist" comment="ipsrcrouterecv = 0" id="oval:mil.disa.fso.aix11:tst:36900" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:object object_ref="oval:mil.disa.fso.aix11:obj:36900" />
      <independent-def:state state_ref="oval:mil.disa.fso.aix11:ste:36900" />
    </independent-def:textfilecontent54_test>
    <independent-def:textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="ip6srcrouteforward = 0" id="oval:mil.disa.fso.aix11:tst:36800" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:object object_ref="oval:mil.disa.fso.aix11:obj:36800" />
      <independent-def:state state_ref="oval:mil.disa.fso.aix11:ste:36800" />
    </independent-def:textfilecontent54_test>
    <independent-def:textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="ipsendredirects = 0" id="oval:mil.disa.fso.aix11:tst:36700" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:object object_ref="oval:mil.disa.fso.aix11:obj:36700" />
      <independent-def:state state_ref="oval:mil.disa.fso.aix11:ste:36700" />
    </independent-def:textfilecontent54_test>
    <independent-def:textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="ipignoreredirects = 1" id="oval:mil.disa.fso.aix11:tst:36600" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:object object_ref="oval:mil.disa.fso.aix11:obj:36600" />
      <independent-def:state state_ref="oval:mil.disa.fso.aix11:ste:36600" />
    </independent-def:textfilecontent54_test>
    <ind-def:textfilecontent54_test check="all" check_existence="none_exist" comment="There are no updateDNS lines in /etc/dhcpcd.ini or /etc/dhcpc.opt" id="oval:mil.disa.fso.aix11:tst:36500" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:36500" />
    </ind-def:textfilecontent54_test>
    <unix-def:process_test check="all" check_existence="none_exist" comment="There must be no DHCP client running" id="oval:mil.disa.fso.aix11:tst:36400" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:36400" />
    </unix-def:process_test>
    <ind-def:textfilecontent54_test check="all" comment="There is a default deny all entry in /etc/hosts.deny" id="oval:mil.disa.fso.aix11:tst:36101" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:36101" />
    </ind-def:textfilecontent54_test>
    <unix-def:file_test check="all" check_existence="all_exist" comment="/etc/hosts.allow and /etc/hosts.deny files exist" id="oval:mil.disa.fso.aix11:tst:36100" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:36100" />
    </unix-def:file_test>
    <file_test check="all" check_existence="any_exist" comment="Check permissions smbpasswd file" id="oval:mil.disa.fso.aix11:tst:34500" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:34300" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34500" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Check group-ownership smbpasswd file" id="oval:mil.disa.fso.aix11:tst:34400" state_operator="OR" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:34300" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34110" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34112" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Check ownership smbpasswd file" id="oval:mil.disa.fso.aix11:tst:34300" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:34300" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34300" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Check permissions smb.conf file" id="oval:mil.disa.fso.aix11:tst:34200" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:34000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34200" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Check group-ownership smb.conf file" id="oval:mil.disa.fso.aix11:tst:34100" state_operator="OR" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:34000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34110" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34111" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34112" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Check ownership smb.conf file" id="oval:mil.disa.fso.aix11:tst:34000" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:34000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34000" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test mode of /etc/exports is 644 or less permissive" id="oval:mil.disa.fso.aix11:tst:33300" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:33100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:11400" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test owner of /etc/exports is root" id="oval:mil.disa.fso.aix11:tst:33100" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:33100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:9500" />
    </file_test>
    <ind-def:textfilecontent54_test check="all" check_existence="any_exist" comment="Compression Setting OK" id="oval:mil.disa.fso.aix11:tst:32700" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:32700" />
      <ind-def:state state_ref="oval:mil.disa.fso.aix11:ste:32700" />
    </ind-def:textfilecontent54_test>
    <textfilecontent54_test check="all" check_existence="any_exist" comment="RhostsRSAAuthentication Setting OK" id="oval:mil.disa.fso.aix11:tst:32600" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:mil.disa.fso.aix11:obj:32600" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:32600" />
    </textfilecontent54_test>
    <ind-def:textfilecontent54_test check="all" check_existence="any_exist" comment="UsePrivilegeSeparation Setting OK" id="oval:mil.disa.fso.aix11:tst:32500" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:32500" />
      <ind-def:state state_ref="oval:mil.disa.fso.aix11:ste:32500" />
    </ind-def:textfilecontent54_test>
    <ind-def:textfilecontent54_test check="all" check_existence="any_exist" comment="StrictModes Setting OK" id="oval:mil.disa.fso.aix11:tst:32400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:32400" />
      <ind-def:state state_ref="oval:mil.disa.fso.aix11:ste:32400" />
    </ind-def:textfilecontent54_test>
    <ind-def:textfilecontent54_test check="all" check_existence="any_exist" comment="Check sshd_config file to ensure that the KerberosAuthentication keyword is present and set to no" id="oval:mil.disa.fso.aix11:tst:31600" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:31600" />
      <ind-def:state state_ref="oval:mil.disa.fso.aix11:ste:31600" />
    </ind-def:textfilecontent54_test>
    <ind-def:textfilecontent54_test check="all" check_existence="any_exist" comment="Check ssh_config file to ensure that the GSSAPIAuthentication keyword is present and set to no" id="oval:mil.disa.fso.aix11:tst:31500" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:31500" />
      <ind-def:state state_ref="oval:mil.disa.fso.aix11:ste:31500" />
    </ind-def:textfilecontent54_test>
    <ind-def:textfilecontent54_test check="all" check_existence="any_exist" comment="Check sshd_config file to ensure that the GSSAPIAuthentication keyword is set to no" id="oval:mil.disa.fso.aix11:tst:31400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:31400" />
      <ind-def:state state_ref="oval:mil.disa.fso.aix11:ste:31400" />
    </ind-def:textfilecontent54_test>
    <file_test check="all" check_existence="any_exist" comment="Test mode of /etc/ssh/*key is 600 or less permissive" id="oval:mil.disa.fso.aix11:tst:31300" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:31300" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:16400" />
    </file_test>
    <unix-def:file_test check="all" check_existence="any_exist" comment="/etc/ssh/*key.pub has mode 0644 or less" id="oval:mil.disa.fso.aix11:tst:31200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:31200" />
      <unix-def:state state_ref="oval:mil.disa.fso.aix11:ste:31200" />
    </unix-def:file_test>
    <ind-def:textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="Check /etc/ssh/sshd_config file to ensure that the AllowGroups keyword is present with associated users and/or groups." id="oval:mil.disa.fso.aix11:tst:31100" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:31100" />
    </ind-def:textfilecontent54_test>
    <ind-def:textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="ssh_config uses approved hash function (hmac-sha1)" id="oval:mil.disa.fso.aix11:tst:30400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:30400" />
      <ind-def:state state_ref="oval:mil.disa.fso.aix11:ste:30400" />
    </ind-def:textfilecontent54_test>
    <ind-def:textfilecontent54_test check="none satisfy" check_existence="at_least_one_exists" comment="ssh_config does not use CBC ciphers" id="oval:mil.disa.fso.aix11:tst:30300" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:object object_ref="oval:mil.disa.fso.aix11:obj:30300" />
      <ind-def:state state_ref="oval:mil.disa.fso.aix11:ste:30300" />
    </ind-def:textfilecontent54_test>
    <textfilecontent54_test check="all" check_existence="all_exist" comment="Test if the ssh protocol is set to 2" id="oval:mil.disa.fso.aix11:tst:29700" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:mil.disa.fso.aix11:obj:29700" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:29700" />
    </textfilecontent54_test>
    <file_test check="all" check_existence="any_exist" comment="Test group of /etc/syslog.conf is system" id="oval:mil.disa.fso.aix11:tst:29203" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:29100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24603" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test group of /etc/syslog.conf is sys" id="oval:mil.disa.fso.aix11:tst:29202" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:29100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24600" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test group of /etc/syslog.conf is bin" id="oval:mil.disa.fso.aix11:tst:29201" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:29100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24601" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test group of /etc/syslog.conf is root" id="oval:mil.disa.fso.aix11:tst:29200" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:29100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24602" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test owner of /etc/syslog.conf is root" id="oval:mil.disa.fso.aix11:tst:29100" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:29100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:9500" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test mode of /etc/syslog.conf is 640 or less permissive" id="oval:mil.disa.fso.aix11:tst:29000" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:29100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:27200" />
    </file_test>
    <password_test check="all" check_existence="at_least_one_exists" comment="Test if the anonymous ftp user has the right login shell" id="oval:mil.disa.fso.aix11:tst:27405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27400" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:27405" />
    </password_test>
    <password_test check="all" check_existence="at_least_one_exists" comment="Test if the anonymous ftp user has the right login shell" id="oval:mil.disa.fso.aix11:tst:27404" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27400" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:27404" />
    </password_test>
    <password_test check="all" check_existence="at_least_one_exists" comment="Test if the anonymous ftp user has the right login shell" id="oval:mil.disa.fso.aix11:tst:27403" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27400" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:27403" />
    </password_test>
    <password_test check="all" check_existence="at_least_one_exists" comment="Test if the anonymous ftp user has the right login shell" id="oval:mil.disa.fso.aix11:tst:27402" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27400" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:27402" />
    </password_test>
    <password_test check="all" check_existence="at_least_one_exists" comment="Test if the anonymous ftp user has the right login shell" id="oval:mil.disa.fso.aix11:tst:27401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27400" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:27401" />
    </password_test>
    <password_test check="all" check_existence="none_exist" comment="Test existence of a user begining with ftp" id="oval:mil.disa.fso.aix11:tst:27400" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27400" />
    </password_test>
    <file_test check="all" check_existence="any_exist" comment="Test mode of /etc/ftpusers is 640 or less permissive" id="oval:mil.disa.fso.aix11:tst:27200" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:27200" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test group of /etc/ftpusers is system" id="oval:mil.disa.fso.aix11:tst:27103" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24603" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test group of /etc/ftpusers is sys" id="oval:mil.disa.fso.aix11:tst:27102" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24600" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test group of /etc/ftpusers is bin" id="oval:mil.disa.fso.aix11:tst:27101" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24601" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test group of /etc/ftpusers is root" id="oval:mil.disa.fso.aix11:tst:27100" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24602" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test owner of /etc/ftpusers is root" id="oval:mil.disa.fso.aix11:tst:27000" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:27000" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:9500" />
    </file_test>
    <file_test check="all" check_existence="at_least_one_exists" comment="ftpusers exists" id="oval:mil.disa.fso.aix11:tst:26901" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:26901" />
    </file_test>
    <file_test check="all" check_existence="none_exist" comment="ftp not installed" id="oval:mil.disa.fso.aix11:tst:26900" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:26900" />
    </file_test>
    <unix-def:file_test check="all" check_existence="none_exist" comment="no .forward files" id="oval:mil.disa.fso.aix11:tst:26200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:object object_ref="oval:mil.disa.fso.aix11:obj:26200" />
    </unix-def:file_test>
    <file_test check="all" check_existence="any_exist" comment="Check /etc/mail/aliases permissions" id="oval:mil.disa.fso.aix11:tst:25100" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:25100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:25100" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Check group-ownership /etc/mail/aliases" id="oval:mil.disa.fso.aix11:tst:25000" state_operator="OR" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:25100" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34110" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34111" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:34112" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test owner of /etc/mail/aliases is root" id="oval:mil.disa.fso.aix11:tst:24900" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:24900" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:9500" />
    </file_test>
    <file_test check="all" check_existence="any_exist" comment="Test mode of /usr/bin/traceroute is 700 or less permissive" id="oval:mil.disa.fso.aix11:tst:24700" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <object object_ref="oval:mil.disa.fso.aix11:obj:24601" />
      <state state_ref="oval:mil.disa.fso.aix11:ste:24700" />
    </file_test>
    <textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="Test existence of group system" id="oval:mil.disa.fso.aix11:tst:24605" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:mil.disa.fso.aix11:obj:24603" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="Test existence of group bin" id="oval:mil.disa.fso.aix11:tst:24602" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:mil.disa.fso.aix11:obj:24602" />
    </textfilecontent54_test>
    <textfilecontent54_test check="all" check_existence="at_least_one_exists" comment="Test existence of group sys" id="oval:mil.disa.fso.aix11:tst:24600" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:mil.disa.fso.aix11:obj:24600" />
    </textfilecontent54_test>
    <textfilecontent_test check="none exist" comment="Test if the Access control files contain a plus sign - /etc/group" id="oval:com.mcafee.oval:tst:50677" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:50677" />
    </textfilecontent_test>
    <textfilecontent_test check="none exist" comment="Access control files should not contain a plus sign - /etc/passwd" id="oval:com.mcafee.oval:tst:50675" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <object object_ref="oval:com.mcafee.oval:obj:50675" />
    </textfilecontent_test>
  </tests>
  <objects>
    <unix-def:inetd_object comment="rstatd daemon inet service" id="oval:mil.disa.fso.aix11:obj:40500" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*udp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*rstatd</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="sprayd daemon inet service" id="oval:mil.disa.fso.aix11:obj:40400" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*udp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*sprayd</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="rusersd daemon inet service" id="oval:mil.disa.fso.aix11:obj:40300" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*udp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*rusersd</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="time daemon inet service" id="oval:mil.disa.fso.aix11:obj:40200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*p</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">time</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="systat service inet service" id="oval:mil.disa.fso.aix11:obj:40100" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">tcp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*systat</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="pcnfs daemon inet service" id="oval:mil.disa.fso.aix11:obj:40000" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">udp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*pcnfsd</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="netstat service inet service" id="oval:mil.disa.fso.aix11:obj:39900" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">tcp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*netstat</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="talk daemon inet service" id="oval:mil.disa.fso.aix11:obj:39800" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*p</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*talk</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="pop3 daemon inet service" id="oval:mil.disa.fso.aix11:obj:39700" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">tcp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*pop3</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="imap daemon inet service" id="oval:mil.disa.fso.aix11:obj:39600" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">tcp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*imap2</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="echo daemon inet service" id="oval:mil.disa.fso.aix11:obj:39500" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*p</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*echo</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="dtspc daemon inet service" id="oval:mil.disa.fso.aix11:obj:39400" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">tcp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*dtspc</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="discard daemon inet service" id="oval:mil.disa.fso.aix11:obj:39300" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*p</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*discard</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="daytime daemon inet service" id="oval:mil.disa.fso.aix11:obj:39200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*p</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*daytime</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="comsat daemon inet service" id="oval:mil.disa.fso.aix11:obj:39100" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">udp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*comsat</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="ttdbserver daemon inet service" id="oval:mil.disa.fso.aix11:obj:39000" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">tcp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*ttdbserver</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="cmsd daemon inet service" id="oval:mil.disa.fso.aix11:obj:38900" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">udp</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*cmsd</unix-def:service_name>
    </unix-def:inetd_object>
    <unix-def:inetd_object comment="chargen daemon inet service" id="oval:mil.disa.fso.aix11:obj:38800" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:protocol datatype="string" operation="pattern match">.*p</unix-def:protocol>
      <unix-def:service_name datatype="string" operation="pattern match">.*chargen</unix-def:service_name>
    </unix-def:inetd_object>
    <file_object comment="File /etc/security/ldap/ldap.cfg" id="oval:mil.disa.fso.aix11:obj:37500" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" operation="equals">/etc/security/ldap</path>
      <filename datatype="string" operation="equals">ldap.cfg</filename>
    </file_object>
    <file_object comment="File /etc/security/ldap/ldap.cfg" id="oval:mil.disa.fso.aix11:obj:37300" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string">/etc/security/ldap</path>
      <filename datatype="string">ldap.cfg</filename>
    </file_object>
    <independent-def:textfilecontent54_object comment="ipsrcrouterecv" id="oval:mil.disa.fso.aix11:obj:36900" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:path datatype="string">/etc/tunables</independent-def:path>
      <independent-def:filename datatype="string">nextboot</independent-def:filename>
      <independent-def:pattern datatype="string" operation="pattern match">^no:[^:]* ipsrcrouterecv = "([0-9]+)"</independent-def:pattern>
      <independent-def:instance datatype="int" operation="greater than or equal">1</independent-def:instance>
    </independent-def:textfilecontent54_object>
    <independent-def:textfilecontent54_object comment="ip6srcrouteforward" id="oval:mil.disa.fso.aix11:obj:36800" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:path datatype="string">/etc/tunables</independent-def:path>
      <independent-def:filename datatype="string">nextboot</independent-def:filename>
      <independent-def:pattern datatype="string" operation="pattern match">^no:[^:]* ip6srcrouteforward = "([0-9]+)"</independent-def:pattern>
      <independent-def:instance datatype="int" operation="greater than or equal">1</independent-def:instance>
    </independent-def:textfilecontent54_object>
    <independent-def:textfilecontent54_object comment="ipsendredirects" id="oval:mil.disa.fso.aix11:obj:36700" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:path datatype="string">/etc/tunables</independent-def:path>
      <independent-def:filename datatype="string">nextboot</independent-def:filename>
      <independent-def:pattern datatype="string" operation="pattern match">^no:[^:]* ipsendredirects = "([0-9]+)"</independent-def:pattern>
      <independent-def:instance datatype="int" operation="greater than or equal">1</independent-def:instance>
    </independent-def:textfilecontent54_object>
    <independent-def:textfilecontent54_object comment="ipignoreredirects" id="oval:mil.disa.fso.aix11:obj:36600" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:path datatype="string">/etc/tunables</independent-def:path>
      <independent-def:filename datatype="string">nextboot</independent-def:filename>
      <independent-def:pattern datatype="string" operation="pattern match">^no:[^:]* ipignoreredirects = "([0-9]+)"</independent-def:pattern>
      <independent-def:instance datatype="int" operation="greater than or equal">1</independent-def:instance>
    </independent-def:textfilecontent54_object>
    <ind-def:textfilecontent54_object comment="updateDNS lines in /etc/dhcpcd.ini and /etc/dhcpc.opt" id="oval:mil.disa.fso.aix11:obj:36500" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc</ind-def:path>
      <ind-def:filename datatype="string" operation="equals" var_check="at least one" var_ref="oval:mil.disa.fso.aix11:var:36500" />
      <ind-def:pattern datatype="string" operation="pattern match">^updateDNS</ind-def:pattern>
      <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <unix-def:process_object comment="dhdpcd process" id="oval:mil.disa.fso.aix11:obj:36400" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:command datatype="string" operation="pattern match">dhcpcd</unix-def:command>
    </unix-def:process_object>
    <ind-def:textfilecontent54_object comment="all entries in /etc/hosts.deny" id="oval:mil.disa.fso.aix11:obj:36101" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string" operation="equals">/etc</ind-def:path>
      <ind-def:filename datatype="string" operation="equals">hosts.deny</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*ALL[ ]*:[ ]*ALL[ ]*</ind-def:pattern>
      <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <unix-def:file_object comment="/etc/hosts.allow and /etc/hosts.deny files" id="oval:mil.disa.fso.aix11:obj:36100" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:path datatype="string" operation="equals">/etc</unix-def:path>
      <unix-def:filename datatype="string" operation="equals" var_check="at least one" var_ref="oval:mil.disa.fso.aix11:var:36100" />
    </unix-def:file_object>
    <file_object comment="File smbpasswd" id="oval:mil.disa.fso.aix11:obj:34300" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" operation="equals">/var/private</path>
      <filename datatype="string" operation="equals">smbpasswd</filename>
    </file_object>
    <file_object comment="File smb.conf" id="oval:mil.disa.fso.aix11:obj:34000" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" operation="equals">/usr/lib</path>
      <filename datatype="string" operation="equals">smb.conf</filename>
    </file_object>
    <file_object comment="File /etc/exports" id="oval:mil.disa.fso.aix11:obj:33100" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string">/etc</path>
      <filename datatype="string">exports</filename>
    </file_object>
    <ind-def:textfilecontent54_object id="oval:mil.disa.fso.aix11:obj:32700" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">sshd_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Cc][Oo][Mm][Pp][Rr][Ee][Ss][Ss][Ii][Oo][Nn][ ]+(yes|no|delayed)[ ]*$</ind-def:pattern>
      <ind-def:instance datatype="int">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <textfilecontent54_object comment="RhostsRSAAuthentication setting" id="oval:mil.disa.fso.aix11:obj:32600" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string" operation="equals">/etc/ssh</path>
      <filename datatype="string" operation="equals">sshd_config</filename>
      <pattern datatype="string" operation="pattern match">^[ ]*[Rr][Hh][Oo][Ss][Tt][Ss][Rr][Ss][Aa][Aa][Uu][Tt][Hh][Ee][Nn][Tt][Ii][Cc][Aa][Tt][Ii][Oo][Nn][ ]+(yes|no)[ ]*$</pattern>
      <instance datatype="int" operation="greater than or equal">1</instance>
    </textfilecontent54_object>
    <ind-def:textfilecontent54_object id="oval:mil.disa.fso.aix11:obj:32500" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">sshd_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Uu][Ss][Ee][Pp][Rr][Ii][Vv][Ii][Ll][Ee][Gg][Ee][Ss][Ee][Pp][Aa][Rr][Aa][Tt][Ii][Oo][Nn][ ]+(yes|no)[ ]*$</ind-def:pattern>
      <ind-def:instance datatype="int">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <ind-def:textfilecontent54_object id="oval:mil.disa.fso.aix11:obj:32400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">sshd_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Ss][Tt][Rr][Ii][Cc][Tt][Mm][Oo][Dd][Ee][Ss][ ]+(yes|no)[ ]*$</ind-def:pattern>
      <ind-def:instance datatype="int">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <ind-def:textfilecontent54_object id="oval:mil.disa.fso.aix11:obj:31600" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">sshd_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Kk][Ee][Rr][Bb][Ee][Rr][Oo][Ss][Aa][Uu][Tt][Hh][Ee][Nn][Tt][Ii][Cc][Aa][Tt][Ii][Oo][Nn][ ]+(yes|no)[ ]*$</ind-def:pattern>
      <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <ind-def:textfilecontent54_object id="oval:mil.disa.fso.aix11:obj:31500" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">ssh_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Gg][Ss][Ss][Aa][Pp][Ii][Aa][Uu][Tt][Hh][Ee][Nn][Tt][Ii][Cc][Aa][Tt][Ii][Oo][Nn][ ]+(yes|no)[ ]*$</ind-def:pattern>
      <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <ind-def:textfilecontent54_object comment="sshd gssapiauthentication" id="oval:mil.disa.fso.aix11:obj:31400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">sshd_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Gg][Ss][Ss][Aa][Pp][Ii][Aa][Uu][Tt][Hh][Ee][Nn][Tt][Ii][Cc][Aa][Tt][Ii][Oo][Nn][ ]+(no|yes)[ ]*$</ind-def:pattern>
      <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <file_object comment="File /etc/ssh/*key" id="oval:mil.disa.fso.aix11:obj:31300" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string">/etc/ssh</path>
      <filename datatype="string" operation="pattern match">^.*key$</filename>
    </file_object>
    <unix-def:file_object comment="/etc/ssh/*key.pub" id="oval:mil.disa.fso.aix11:obj:31200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:path datatype="string" operation="equals">/etc/ssh</unix-def:path>
      <unix-def:filename datatype="string" operation="pattern match">key\.pub$</unix-def:filename>
    </unix-def:file_object>
    <ind-def:textfilecontent54_object comment="AllowUsers or AllowGroups with argument" id="oval:mil.disa.fso.aix11:obj:31100" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">sshd_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Aa][Ll][Ll][Oo][Ww]([Gg][Rr][Oo][Uu][Pp][Ss]|[Uu][Ss][Ee][Rr][Ss])[ ]+[^ ]+</ind-def:pattern>
      <ind-def:instance datatype="int">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <ind-def:textfilecontent54_object comment="/etc/ssh/ssh_config MACs configuration" id="oval:mil.disa.fso.aix11:obj:30400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">ssh_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Mm][Aa][Cc][sS][ ]+([^# ]+)</ind-def:pattern>
      <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <ind-def:textfilecontent54_object comment="/etc/ssh/ssh_config Ciphers configuration" id="oval:mil.disa.fso.aix11:obj:30300" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:path datatype="string">/etc/ssh</ind-def:path>
      <ind-def:filename datatype="string">ssh_config</ind-def:filename>
      <ind-def:pattern datatype="string" operation="pattern match">^[ ]*[Cc][iI][pP][hH][eE][rR][sS][ ]+([^# ]+)</ind-def:pattern>
      <ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
    </ind-def:textfilecontent54_object>
    <textfilecontent54_object comment="Protocol is set to 2 in /etc/ssh/sshd_config" id="oval:mil.disa.fso.aix11:obj:29700" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string">/etc/ssh</path>
      <filename datatype="string">sshd_config</filename>
      <pattern datatype="string" operation="pattern match">^\s*[pP][rR][oO][tT][oO][cC][oO][lL]\s(\S+)\s*$</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <file_object comment="File /etc/syslog.conf" id="oval:mil.disa.fso.aix11:obj:29100" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string">/etc</path>
      <filename datatype="string">syslog.conf</filename>
    </file_object>
    <password_object comment="Anonymous ftp user exists" id="oval:mil.disa.fso.aix11:obj:27400" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <username datatype="string" operation="pattern match">^ftp</username>
    </password_object>
    <file_object comment="File /etc/ftpusers" id="oval:mil.disa.fso.aix11:obj:27000" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string">/etc</path>
      <filename datatype="string">ftpusers</filename>
    </file_object>
    <file_object comment="/etc/ftpusers" id="oval:mil.disa.fso.aix11:obj:26901" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" operation="equals">/etc</path>
      <filename datatype="string" operation="equals">ftpusers</filename>
    </file_object>
    <file_object comment="/usr/sbin/ftpd" id="oval:mil.disa.fso.aix11:obj:26900" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" operation="equals">/usr/sbin</path>
      <filename datatype="string" operation="equals">ftpd</filename>
    </file_object>
    <unix-def:password_object comment="all users" id="oval:mil.disa.fso.aix11:obj:26201" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:username datatype="string" operation="pattern match">.*</unix-def:username>
    </unix-def:password_object>
    <unix-def:file_object comment=".forward files" id="oval:mil.disa.fso.aix11:obj:26200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:path datatype="string" var_check="at least one" var_ref="oval:mil.disa.fso.aix11:var:26200" />
      <unix-def:filename datatype="string" operation="pattern match">^\.forward</unix-def:filename>
    </unix-def:file_object>
    <file_object comment="File /etc/mail/aliases" id="oval:mil.disa.fso.aix11:obj:25100" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string" operation="equals">/etc/mail</path>
      <filename datatype="string" operation="equals">aliases</filename>
    </file_object>
    <file_object comment="File /etc/mail/aliases" id="oval:mil.disa.fso.aix11:obj:24900" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string">/etc/mail</path>
      <filename datatype="string">aliases</filename>
    </file_object>
    <textfilecontent54_object comment="/etc/group for system" id="oval:mil.disa.fso.aix11:obj:24603" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string">/etc</path>
      <filename datatype="string">group</filename>
      <pattern datatype="string" operation="pattern match">^system:[^:]*:([0-9]+):</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent54_object comment="/etc/group for bin" id="oval:mil.disa.fso.aix11:obj:24602" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string">/etc</path>
      <filename datatype="string">group</filename>
      <pattern datatype="string" operation="pattern match">^bin:[^:]*:([0-9]+):</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <file_object comment="File /usr/bin/traceroute" id="oval:mil.disa.fso.aix11:obj:24601" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <path datatype="string">/usr/bin</path>
      <filename datatype="string">traceroute</filename>
    </file_object>
    <textfilecontent54_object comment="/etc/group for sys" id="oval:mil.disa.fso.aix11:obj:24600" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path datatype="string">/etc</path>
      <filename datatype="string">group</filename>
      <pattern datatype="string" operation="pattern match">^sys:[^:]*:([0-9]+):</pattern>
      <instance datatype="int">1</instance>
    </textfilecontent54_object>
    <textfilecontent_object id='oval:com.mcafee.oval:obj:50677' version='9' xmlns='http://oval.mitre.org/XMLSchema/oval-definitions-5#independent'>
      <path>/etc</path>
      <filename datatype='string' operation='equals'>group</filename>
      <line datatype='string' operation='pattern match'>\+</line>
    </textfilecontent_object>
    <textfilecontent_object id="oval:com.mcafee.oval:obj:50675" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <path>/etc</path>
      <filename datatype="string" operation="equals">passwd</filename>
      <line datatype="string" operation="pattern match">\+</line>
    </textfilecontent_object>
  </objects>
  <states>
    <file_state comment="File owned by user root" id="oval:mil.disa.fso.aix11:ste:9500" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <user_id datatype="int" operation="equals">0</user_id>
    </file_state>
    <unix-def:inetd_state comment="rstatd daemon" id="oval:mil.disa.fso.aix11:ste:40500" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/rpc.rstatd$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="sprayd daemon" id="oval:mil.disa.fso.aix11:ste:40400" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/rpc.sprayd$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="rusersd daemon" id="oval:mil.disa.fso.aix11:ste:40300" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/rpc.rusersd$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="time daemon" id="oval:mil.disa.fso.aix11:ste:40200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*internal$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="systat service" id="oval:mil.disa.fso.aix11:ste:40100" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/ps$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="pcnfs daemon" id="oval:mil.disa.fso.aix11:ste:40000" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/rpc.pcnfsd$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="netstat service" id="oval:mil.disa.fso.aix11:ste:39900" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/netstat$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="talk daemon" id="oval:mil.disa.fso.aix11:ste:39800" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/talkd$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="pop3 daemon" id="oval:mil.disa.fso.aix11:ste:39700" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/pop3d$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="imap daemon" id="oval:mil.disa.fso.aix11:ste:39600" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/imapd$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="echo daemon" id="oval:mil.disa.fso.aix11:ste:39500" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*internal$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="dtspc daemon" id="oval:mil.disa.fso.aix11:ste:39400" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/dtspcd$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="discard daemon" id="oval:mil.disa.fso.aix11:ste:39300" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*internal$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="daytime daemon" id="oval:mil.disa.fso.aix11:ste:39200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*internal$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="comsat daemon" id="oval:mil.disa.fso.aix11:ste:39100" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/comsat$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="ttdbserver daemon" id="oval:mil.disa.fso.aix11:ste:39000" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/rpc.ttdbserver$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="cmsd daemon" id="oval:mil.disa.fso.aix11:ste:38900" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*/rpc.cmsd$</unix-def:server_program>
    </unix-def:inetd_state>
    <unix-def:inetd_state comment="chargen daemon" id="oval:mil.disa.fso.aix11:ste:38800" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:server_program operation="pattern match">.*internal$</unix-def:server_program>
    </unix-def:inetd_state>
    <independent-def:textfilecontent54_state comment="ipsrcrouterecv=0" id="oval:mil.disa.fso.aix11:ste:36900" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:subexpression datatype="int">0</independent-def:subexpression>
    </independent-def:textfilecontent54_state>
    <independent-def:textfilecontent54_state comment="ip6srcrouteforward=0" id="oval:mil.disa.fso.aix11:ste:36800" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:subexpression datatype="int">0</independent-def:subexpression>
    </independent-def:textfilecontent54_state>
    <independent-def:textfilecontent54_state comment="ipsendredirects=0" id="oval:mil.disa.fso.aix11:ste:36700" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:subexpression datatype="int">0</independent-def:subexpression>
    </independent-def:textfilecontent54_state>
    <independent-def:textfilecontent54_state comment="ipignoreredirects=1" id="oval:mil.disa.fso.aix11:ste:36600" version="10" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <independent-def:subexpression datatype="int">1</independent-def:subexpression>
    </independent-def:textfilecontent54_state>
    <file_state comment="File has mode 0600 or less permissive" id="oval:mil.disa.fso.aix11:ste:34500" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean" operation="equals">false</suid>
      <sgid datatype="boolean" operation="equals">false</sgid>
      <uexec datatype="boolean" operation="equals">false</uexec>
      <gread datatype="boolean" operation="equals">false</gread>
      <gwrite datatype="boolean" operation="equals">false</gwrite>
      <gexec datatype="boolean" operation="equals">false</gexec>
      <oread datatype="boolean" operation="equals">false</oread>
      <owrite datatype="boolean" operation="equals">false</owrite>
      <oexec datatype="boolean" operation="equals">false</oexec>
    </file_state>
    <file_state comment="File smbpasswd ownership root (0)" id="oval:mil.disa.fso.aix11:ste:34300" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <user_id datatype="int" entity_check="all" operation="equals">0</user_id>
    </file_state>
    <file_state comment="File has mode 0644 or less permissive" id="oval:mil.disa.fso.aix11:ste:34200" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean" operation="equals">false</suid>
      <sgid datatype="boolean" operation="equals">false</sgid>
      <uexec datatype="boolean" operation="equals">false</uexec>
      <gwrite datatype="boolean" operation="equals">false</gwrite>
      <gexec datatype="boolean" operation="equals">false</gexec>
      <owrite datatype="boolean" operation="equals">false</owrite>
      <oexec datatype="boolean" operation="equals">false</oexec>
    </file_state>
    <file_state comment="group_id 3" id="oval:mil.disa.fso.aix11:ste:34112" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <group_id datatype="int" operation="equals">3</group_id>
    </file_state>
    <file_state comment="group_id 2" id="oval:mil.disa.fso.aix11:ste:34111" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <group_id datatype="int" operation="equals">2</group_id>
    </file_state>
    <file_state comment="group_id 0" id="oval:mil.disa.fso.aix11:ste:34110" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <group_id datatype="int" operation="equals">0</group_id>
    </file_state>
    <file_state comment="File smb.conf ownership root (0)" id="oval:mil.disa.fso.aix11:ste:34000" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <user_id datatype="int" entity_check="all" operation="equals">0</user_id>
    </file_state>
    <ind-def:textfilecontent54_state id="oval:mil.disa.fso.aix11:ste:32700" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:subexpression datatype="string" operation="pattern match">no|delayed</ind-def:subexpression>
    </ind-def:textfilecontent54_state>
    <textfilecontent54_state comment="RhostsRSAAuthentication no" id="oval:mil.disa.fso.aix11:ste:32600" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string">no</subexpression>
    </textfilecontent54_state>
    <ind-def:textfilecontent54_state id="oval:mil.disa.fso.aix11:ste:32500" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:subexpression datatype="string">yes</ind-def:subexpression>
    </ind-def:textfilecontent54_state>
    <ind-def:textfilecontent54_state id="oval:mil.disa.fso.aix11:ste:32400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:subexpression datatype="string">yes</ind-def:subexpression>
    </ind-def:textfilecontent54_state>
    <ind-def:textfilecontent54_state id="oval:mil.disa.fso.aix11:ste:31600" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:subexpression datatype="string">no</ind-def:subexpression>
    </ind-def:textfilecontent54_state>
    <ind-def:textfilecontent54_state id="oval:mil.disa.fso.aix11:ste:31500" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:subexpression datatype="string">no</ind-def:subexpression>
    </ind-def:textfilecontent54_state>
    <ind-def:textfilecontent54_state comment="sshd gssapiauthentication no" id="oval:mil.disa.fso.aix11:ste:31400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:subexpression datatype="string">no</ind-def:subexpression>
    </ind-def:textfilecontent54_state>
    <unix-def:file_state comment="mode 0644" id="oval:mil.disa.fso.aix11:ste:31200" version="10" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <unix-def:suid datatype="boolean">false</unix-def:suid>
      <unix-def:sgid datatype="boolean">false</unix-def:sgid>
      <unix-def:sticky datatype="boolean">false</unix-def:sticky>
      <unix-def:uexec datatype="boolean">false</unix-def:uexec>
      <unix-def:gwrite datatype="boolean">false</unix-def:gwrite>
      <unix-def:gexec datatype="boolean">false</unix-def:gexec>
      <unix-def:owrite datatype="boolean">false</unix-def:owrite>
      <unix-def:oexec datatype="boolean">false</unix-def:oexec>
    </unix-def:file_state>
    <ind-def:textfilecontent54_state comment="matches hmac-sha1" id="oval:mil.disa.fso.aix11:ste:30400" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:subexpression datatype="string" operation="pattern match">^[hH][mM][aA][cC]-[sS][hH][aA]1[ ,]*$</ind-def:subexpression>
    </ind-def:textfilecontent54_state>
    <ind-def:textfilecontent54_state comment="matches CBC" id="oval:mil.disa.fso.aix11:ste:30300" version="10" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <ind-def:subexpression datatype="string" operation="pattern match">[cC][bB][cC]</ind-def:subexpression>
    </ind-def:textfilecontent54_state>
    <textfilecontent54_state comment="Does Protocol 2 and no other Protocol versions exist enabled." id="oval:mil.disa.fso.aix11:ste:29700" version="2" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent">
      <subexpression datatype="string" operation="pattern match">^(2)$</subexpression>
    </textfilecontent54_state>
    <password_state comment="Is the anonymous ftp user logging in to /sbin/nologin." id="oval:mil.disa.fso.aix11:ste:27405" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <login_shell datatype="string" operation="equals">/sbin/nologin</login_shell>
    </password_state>
    <password_state comment="Is the anonymous ftp user logging in to /bin/true." id="oval:mil.disa.fso.aix11:ste:27404" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <login_shell datatype="string" operation="equals">/bin/true</login_shell>
    </password_state>
    <password_state comment="Is the anonymous ftp user logging in to /usr/bin/false." id="oval:mil.disa.fso.aix11:ste:27403" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <login_shell datatype="string" operation="equals">/usr/bin/false</login_shell>
    </password_state>
    <password_state comment="Is the anonymous ftp user logging in to /dev/null." id="oval:mil.disa.fso.aix11:ste:27402" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <login_shell datatype="string" operation="equals">/dev/null</login_shell>
    </password_state>
    <password_state comment="Is the anonymous ftp user logging in to /bin/false." id="oval:mil.disa.fso.aix11:ste:27401" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <login_shell datatype="string" operation="equals">/bin/false</login_shell>
    </password_state>
    <file_state comment="File has mode 640 or less permissive" id="oval:mil.disa.fso.aix11:ste:27200" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean" operation="equals">false</suid>
      <sgid datatype="boolean" operation="equals">false</sgid>
      <uexec datatype="boolean" operation="equals">false</uexec>
      <gwrite datatype="boolean" operation="equals">false</gwrite>
      <gexec datatype="boolean" operation="equals">false</gexec>
      <oread datatype="boolean" operation="equals">false</oread>
      <owrite datatype="boolean" operation="equals">false</owrite>
      <oexec datatype="boolean" operation="equals">false</oexec>
    </file_state>
    <file_state comment="File has mode 0644 or less permissive" id="oval:mil.disa.fso.aix11:ste:25100" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean" operation="equals">false</suid>
      <sgid datatype="boolean" operation="equals">false</sgid>
      <uexec datatype="boolean" operation="equals">false</uexec>
      <gwrite datatype="boolean" operation="equals">false</gwrite>
      <gexec datatype="boolean" operation="equals">false</gexec>
      <owrite datatype="boolean" operation="equals">false</owrite>
      <oexec datatype="boolean" operation="equals">false</oexec>
    </file_state>
    <file_state comment="File has mode 700 or less permissive" id="oval:mil.disa.fso.aix11:ste:24700" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean" operation="equals">false</suid>
      <sgid datatype="boolean" operation="equals">false</sgid>
      <gread datatype="boolean" operation="equals">false</gread>
      <gwrite datatype="boolean" operation="equals">false</gwrite>
      <gexec datatype="boolean" operation="equals">false</gexec>
      <oread datatype="boolean" operation="equals">false</oread>
      <owrite datatype="boolean" operation="equals">false</owrite>
      <oexec datatype="boolean" operation="equals">false</oexec>
    </file_state>
    <file_state comment="File owned by group system" id="oval:mil.disa.fso.aix11:ste:24603" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <group_id datatype="int" operation="equals" var_check="all" var_ref="oval:mil.disa.fso.aix11:var:24602" />
    </file_state>
    <file_state comment="File owned by group root" id="oval:mil.disa.fso.aix11:ste:24602" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <group_id datatype="int" operation="equals">0</group_id>
    </file_state>
    <file_state comment="File owned by group bin" id="oval:mil.disa.fso.aix11:ste:24601" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <group_id datatype="int" operation="equals" var_check="all" var_ref="oval:mil.disa.fso.aix11:var:24601" />
    </file_state>
    <file_state comment="File owned by group sys" id="oval:mil.disa.fso.aix11:ste:24600" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <group_id datatype="int" operation="equals" var_check="all" var_ref="oval:mil.disa.fso.aix11:var:24600" />
    </file_state>
    <file_state comment="File has mode 600 or less permissive" id="oval:mil.disa.fso.aix11:ste:16400" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean" operation="equals">false</suid>
      <sgid datatype="boolean" operation="equals">false</sgid>
      <uexec datatype="boolean" operation="equals">false</uexec>
      <gread datatype="boolean" operation="equals">false</gread>
      <gwrite datatype="boolean" operation="equals">false</gwrite>
      <gexec datatype="boolean" operation="equals">false</gexec>
      <oread datatype="boolean" operation="equals">false</oread>
      <owrite datatype="boolean" operation="equals">false</owrite>
      <oexec datatype="boolean" operation="equals">false</oexec>
    </file_state>
    <file_state comment="File has mode 644 or less permissive" id="oval:mil.disa.fso.aix11:ste:11400" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <suid datatype="boolean" operation="equals">false</suid>
      <sgid datatype="boolean" operation="equals">false</sgid>
      <uexec datatype="boolean" operation="equals">false</uexec>
      <gwrite datatype="boolean" operation="equals">false</gwrite>
      <gexec datatype="boolean" operation="equals">false</gexec>
      <owrite datatype="boolean" operation="equals">false</owrite>
      <oexec datatype="boolean" operation="equals">false</oexec>
    </file_state>
    <file_state comment="group_id 7" id="oval:mil.disa.fso.aix11:ste:11210" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
      <group_id datatype="int" operation="equals">7</group_id>
    </file_state>
  </states>
  <variables>
    <constant_variable comment="dhcpc configuration files" datatype="string" id="oval:mil.disa.fso.aix11:var:36500" version="10">
      <value>dhcpcd.ini</value>
      <value>dhcpd.opt</value>
    </constant_variable>
    <constant_variable comment="hosts.deny and hosts.allow" datatype="string" id="oval:mil.disa.fso.aix11:var:36100" version="10">
      <value>hosts.deny</value>
      <value>hosts.allow</value>
    </constant_variable>
    <local_variable comment="all home dirs" datatype="string" id="oval:mil.disa.fso.aix11:var:26200" version="10">
      <object_component item_field="home_dir" object_ref="oval:mil.disa.fso.aix11:obj:26201" />
    </local_variable>
    <local_variable comment="GID for group system" datatype="int" id="oval:mil.disa.fso.aix11:var:24602" version="10">
      <object_component item_field="subexpression" object_ref="oval:mil.disa.fso.aix11:obj:24603" />
    </local_variable>
    <local_variable comment="GID for group bin" datatype="int" id="oval:mil.disa.fso.aix11:var:24601" version="10">
      <object_component item_field="subexpression" object_ref="oval:mil.disa.fso.aix11:obj:24602" />
    </local_variable>
    <local_variable comment="GID for group sys" datatype="int" id="oval:mil.disa.fso.aix11:var:24600" version="10">
      <object_component item_field="subexpression" object_ref="oval:mil.disa.fso.aix11:obj:24600" />
    </local_variable>
  </variables>
</oval_definitions>
