GEN003080 - Crontab files must have mode 0600 or less permissive.

Information

To protect the integrity of scheduled system jobs and prevent malicious modification to these jobs, crontab files must be secured.

Solution

Change the mode of the crontab files.
# chmod 0600 /var/spool/cron/crontabs/*

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Audit Name: DISA STIG AIX 6.1 v1r14

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-978, Rule-ID|SV-27340r1_rule, STIG-ID|GEN003080, Vuln-ID|V-978

Plugin: Unix

Control ID: 3d6ababdd2476e50744b3c964f27cde9f292bce6d43f97a06b228e6a5a8b5a19