Detections
Analytics

1.2.1.6 Ensure access to files in the /etc/apt/auth.conf.d/ directory is configured

Information

Files in the /etc/apt/auth.conf.d directory contains .conf files with configured credentials for private APT repositories or proxy.

Access to the .conf files in the /etc/apt/auth.conf.d directory should be restricted to prevent secrets leakage of Login information needed to connect to a proxy or to download data from a repository.

Solution

Run the following commands to set all .conf files in the /etc/apt/auth.conf.d/ directory Uid and Gid both to 0/root and mode 0640 :

# chown root:root /etc/apt/auth.conf.d/*
# chmod u-x,g-wx,o-rwx /etc/apt/auth.conf.d/*

See Also

https://workbench.cisecurity.org/benchmarks/26891

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5, CSCv7|14.6

Plugin: Unix

Control ID: 4df59d354321b03e66f8e08dab55e26a508e74e89f69734b75e3253cdb086685