Detections
Analytics

4.6.1.10 Ensure the file /etc/dt/config/Xservers is configured

Information

The /etc/dt/config/Xservers contains entries to start the Xserver on the local display. Ensure this file is owned by root:bin and prevents group and other from writing to it.

The /etc/dt/config/Xservers contains entries to start the Xserver on the local display. The default file, /usr/dt/config/Xservers is unconditionally overwritten upon subsequent installation. It is recommended that the appropriate permissions and ownership are applied to secure the file.

Solution

Check to see if the /etc/dt/config/Xservers exists:

ls -l /etc/dt/config/Xservers

If it exists ensure that it is explicitly defined in /etc/dt/config/Xconfig :

vi /etc/dt/config/Xconfig

Replace:

Dtlogin*servers: Xservers

With:

Dtlogin*servers: /etc/dt/config/Xservers

Apply the appropriate ownership and permissions to /etc/dt/config/Xservers :

chown root:bin /etc/dt/config/Xservers
chmod go-w /etc/dt/config/Xservers

See Also

https://workbench.cisecurity.org/benchmarks/19066

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: Unix

Control ID: bb788b191dc69bed4428ad64cb000d2ca1a5801e8792b36e40402113595407d0