Detections
Analytics
GEN003140 - Cron and crontab directories must be group-owned by root, sys, or bin.
Information
To protect the integrity of scheduled system jobs and to prevent malicious modification to these jobs, crontab files must be secured. Failure to give group-ownership of cron or crontab directories to a system group provides the designated group and unauthorized users with the potential to access sensitive information or change the system configuration which could weaken the system's security posture.Solution
Change the group owner of the crontab directories to root, sys, or bin.Procedure:
# chgrp root /var/spool/cron/crontabs
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 SPARC v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-226625r603265_rule, STIG-ID|GEN003140, STIG-Legacy|SV-27347, STIG-Legacy|V-981, Vuln-ID|V-226625
Plugin: Unix
Control ID: 1444f15792aa62548905f58aac8cde39b4b612930517456969824fea049ab3ca