Detections
Analytics
GEN003000 - Cron must not execute group-writable or world-writable programs.
Information
If cron executes group-writable or world-writable programs, there is a possibility that unauthorized users could manipulate the programs with malicious intent. This could compromise system and network security.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Remove the world-writable and group-writable permissions from the cron program file(s) identified.# chmod go-w <cron program file>
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Rule-ID|SV-27329r1_rule, STIG-ID|GEN003000, Vuln-ID|V-976
Plugin: Unix
Control ID: 3e2dc4206a991dbddf2afcffe584cfa114e77228a6a7d650c8f89f881a6112fa