Detections
Analytics

GEN003980 - The traceroute command must be group-owned by sys, bin, or root.

Information

If the group owner of the traceroute command has not been set to a system group, unauthorized users could have access to the command and use it to gain information regarding a network's topology inside of the firewall. This information may allow an attacker to determine trusted routers and other network information possibly leading to system and network compromise.

Solution

Change the group-owner of the traceroute command to root.

Procedure:
# chgrp root /usr/sbin/traceroute

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-226926r603265_rule, STIG-ID|GEN003980, STIG-Legacy|SV-28395, STIG-Legacy|V-4370, Vuln-ID|V-226926

Plugin: Unix

Control ID: cfb4301fed8bc5f22a918dd8be3c9d7cfa479275bd99a264421186768cf107a7