GEN003340 - The at.allow file must have mode 0640 or less permissive.

Information

Permissions more permissive than 0640 may allow unauthorized or malicious access to the at.allow and/or at.deny files.

Solution

Change the mode of the at.allow file.
# chmod 0640 /var/adm/cron/at.allow

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Audit Name: DISA AIX 5.3 STIG v1r2

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-39871r1_rule, STIG-ID|GEN003340, Vuln-ID|V-987

Plugin: Unix

Control ID: f227c995136e9fa859e54c4d5f7a19dae88045f9d36af342052fee17c07ed895