Detections
Analytics
GEN004410 - Files executed by a mail aliases file must be group-owned by root, bin, sys, or system.
Information
If a file executed through a mail aliases file is not group-owned by root or a system group, it may be subject to unauthorized modification. Unauthorized modification of files executed through aliases may allow unauthorized users to attain root privileges.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Change the group ownership of the file referenced from /etc/aliases.Procedure:
# chgrp root <file referenced from aliases>
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22440, Rule-ID|SV-37493r1_rule, STIG-ID|GEN004410, Vuln-ID|V-22440
Plugin: Unix
Control ID: cade1bd0ad73b50f52415cc8c6e3dd891e33ecaac37b4aac382d48612a82ceb9