InformationThe /var/adm/cron/at.allow file defines which users on the system are able to schedule jobs via at.
The /var/adm/cron/at.allow file defines which users are able to schedule jobs via at. Review the current at files and add any relevant users to the /var/adm/cron/at.allow file.
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
SolutionReview the current at files:
ls -l /var/spool/cron/atjobs
NOTE: Review the list of at schedules and remove any files which should not be there, or have no content
Add the recommended system users to the at.allow list:
echo 'adm' >> /var/adm/cron/at.allow
echo 'sys' >> /var/adm/cron/at.allow
Add any other users who require permissions to use the at scheduler:
echo <user> >> /var/adm/cron/at.allow
NOTE: Where <user> is the username.