Detections
Analytics

1.30 VCLU-80-000144

Information

The vCenter Lookup service files must have permissions in an out-of-the-box state.

GROUP ID: V-259066RULE ID: SV-259066r961461

As a rule, accounts on a web server are to be kept to a minimum. Only administrators, web managers, developers, auditors, and web authors require accounts on the machine hosting the web server. The resources to which these accounts have access must also be closely monitored and controlled.

Solution

At the command prompt, run the following commands:

chmod o-w chown root:root

Note: Substitute with the listed file.

See Also

https://workbench.cisecurity.org/benchmarks/23617

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-5(1), CAT|II, CCI|CCI-001813, Rule-ID|SV-259066r961461_rule, STIG-ID|VCLU-80-000144, Vuln-ID|V-259066

Plugin: Unix

Control ID: a04167729ae3b47135664a0aef1c4187d702795e27f22b71432fd3b7a465308e