Rule version AIX7-00-001047 · STIG v3 · 2026-08-31
A plus (+) in system accounts files causes the system to lookup the specified entry using NIS. If the system is not using NIS, no such entries should exist.
Check system configuration files for plus (+) entries using the following commands:
# cat /etc/passwd | grep -v "^#" | grep "\+"
# cat /etc/security/passwd | grep -v "^#" | grep "\+"
# cat /etc/group | grep -v "^#" | grep "\+"
If the "/etc/passwd", "/etc/security/passwd", and/or "/etc/group" files contain a plus (+) and do not define entries for NIS+ netgroups or LDAP netgroups, this is a finding.
Edit "/etc/passwd", "/etc/security/passwd", and/or "/etc/group" files and remove entries containing a plus (+).