Detections
Analytics
GEN003250 - The cron.allow file must be group-owned by root, bin, or sys.
Information
If the group of the cron.allow is not set to root, bin, or sys, the possibility exists for an unauthorized user to view or edit the list of users permitted to use cron. Unauthorized modification of this file could cause Denial of Service to authorized cron users or provide unauthorized users with the ability to run cron jobs.Solution
Change the group ownership of the file.Procedure:
# chgrp root /etc/cron.d/cron.allow
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 SPARC v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-226634r603265_rule, STIG-ID|GEN003250, STIG-Legacy|SV-26553, STIG-Legacy|V-22391, Vuln-ID|V-226634
Plugin: Unix
Control ID: 62e968dfda04919aee13f89ffdb13a69d1319ae2d5978a3c8b4efb29080d2853