Detections
Analytics
GEN003730 - The xinetd.conf file, and the xinetd.d directory must be group-owned by root, bin, sys, or system - '/etc/xinetd.d'
Information
Failure to give ownership of sensitive files or utilities to system groups may provide unauthorized users with the potential to access sensitive information or change the system configuration possibly weakening the system's security posture.Solution
Change the group-owner of the xinetd configuration files and directories.Procedure:
# chgrp -R root /etc/xinetd.conf /etc/xinetd.d
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22423, Rule-ID|SV-37407r1_rule, STIG-ID|GEN003730, Vuln-ID|V-22423
Plugin: Unix
Control ID: e2a0c03c13de13535006efac4b9ab1ed00cb7ff443290eb71aaf7fb3815cf803