Detections
Analytics

GEN002717 - System audit tool executables must have mode 0750 or less permissive - '/usr/sbin/audfilterd'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

To prevent unauthorized access or manipulation of system audit logs, the tools for manipulating those logs must be protected.

Solution

As root, change the file permissions.
# chmod 0750 <audit tool executable>

See Also

https://iasecontent.disa.mil/stigs/zip/U_HPUX_11-31_V1R19_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|III, CCI|CCI-001493, CSCv6|3.1, Rule-ID|SV-26512r2_rule, STIG-ID|GEN002717, Vuln-ID|V-22372

Plugin: Unix

Control ID: 590fa197d3cd569056d9d77c81b971a5f07be37c22dbb010b71d49658862135b