Detections
Analytics

GEN004430 - Files executed through a mail aliases file must not have extended ACLs.

Information

Excessive permissions on files executed through a mail aliases file could result in modification by an unauthorized user, execution of malicious code, and/or system compromise.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Remove the extended ACL from the file.
# setfacl --remove-all <file referenced from aliases>

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22441, Rule-ID|SV-37496r1_rule, STIG-ID|GEN004430, Vuln-ID|V-22441

Plugin: Unix

Control ID: d1459a9eb2cce9cb11232032759330b1ad16aa6241d5655f26c05f3e7e924579