Detections
Analytics

GEN003420 - The at directory must be owned by root, bin, sys, daemon, or cron.

Information

If the owner of the at directory is not root, bin, sys, daemon, or cron unauthorized users could be allowed to view or edit files containing sensitive information within the directory.

Solution

Change the owner of the at directory to root, bin, sys, daemon, or cron.
Procedure:
# chown bin /var/spool/cron/atjobs

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-39350r1_rule, STIG-ID|GEN003420, Vuln-ID|V-4365

Plugin: Unix

Control ID: 673c278c2a561c581caf3673e74917621f4faa1311c6c1da285000242e6892a7