GEN003040 - Crontabs must be owned by root or the crontab creator - '/etc/cron.monthly/*'

Information

To protect the integrity of scheduled system jobs and prevent malicious modification to these jobs, crontab files must be secured.

Solution

Change the crontab owner to root or the crontab creator.

# chown root <crontab file>
or
# chown <user> <crontab file>

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Audit Name: DISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-11994, Rule-ID|SV-37392r1_rule, STIG-ID|GEN003040, Vuln-ID|V-11994

Plugin: Unix

Control ID: e566495771777dfabe7c762aae287aeb0ec023226bc6956632ae2f31552e5b25