GEN005750 - The NFS export configuration file must be group-owned by root, bin, or sys.

Information

Failure to give group ownership of the NFS export configuration file to root or system groups provides the designated group owner and possible unauthorized users with the potential to change system configuration which could weaken the system's security posture.

Solution

Change the group ownership of the NFS export configuration file.

Procedure:
# chgrp root /etc/dfs/dfstab

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227007r603265_rule, STIG-ID|GEN005750, STIG-Legacy|SV-26813, STIG-Legacy|V-22492, Vuln-ID|V-227007

Plugin: Unix

Control ID: 1374e8e4cfe5d5ed23ab90bd808e562d846cf8ba1e40dd8653c66b406942cc49