Detections
Analytics

GEN000000-LNX00450 - The access.conf file must not have an extended ACL.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

If the access permissions are more permissive than 0640, system security could be compromised.

Solution

Remove the extended ACL from the file.
# setfacl --remove-all /etc/security/access.conf

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_5_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(4), CAT|II, CCI|CCI-000225, CCI|CCI-000366, Rule-ID|SV-62909r1_rule, STIG-ID|GEN000000-LNX00450, Vuln-ID|V-22595

Plugin: Unix

Control ID: dfebd0338909283357de5c87bd0a712206e8dea8f6669e05f2fe181a9b11414c