Detections
Analytics
GEN004410 - Files executed through a mail aliases file must be group-owned by root, bin, sys, or other.
Information
If a file executed through a mail aliases file is not group-owned by root or a system group, it may be subject to unauthorized modification. Unauthorized modification of files executed through aliases may allow unauthorized users to attain root privileges.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Change the group ownership of the file referenced from /etc/mail/aliases.# chgrp root <file referenced from aliases>
See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22440, Rule-ID|SV-38373r1_rule, STIG-ID|GEN004410, Vuln-ID|V-22440
Plugin: Unix
Control ID: ecb4e22fb83853a2cab50d2ac76f6060878a85934aca5f33c207f64fe669af68