Detections
Analytics
GEN008220 - For systems using NSS LDAP, the TLS certificate file must be owned by root - ''/etc/openldap/cacerts/cert.pem
Information
The NSS LDAP service provides user mappings which are a vital component of system security. Its configuration must be protected from unauthorized modification.Solution
Change the ownership of the file.# chown root <certpath>
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22567, Rule-ID|SV-37965r1_rule, STIG-ID|GEN008220, Vuln-ID|V-22567
Plugin: Unix
Control ID: 85c5e46b9cbe6501518de0c997f18cd410b504da36e85fd97e28be6201002126