Detections
Analytics
GEN003320 - Default system accounts (with the exception of root) must not be listed in the at.allow file or must be included in the at.deny file if the at.allow file does not exist.
Information
Default accounts, such as bin, sys, adm, uucp, daemon, and others, should never have access to the at facility. This would create a possible vulnerability open to intruders or malicious users.Solution
Remove the default accounts (such as bin, sys, adm, and others) from the at.allow file.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 SPARC v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-226862r603265_rule, STIG-ID|GEN003320, STIG-Legacy|SV-27384, STIG-Legacy|V-986, Vuln-ID|V-226862
Plugin: Unix
Control ID: 22171a6336aacd0277fb88b6f91fee0367076aee965a4ec22d7a9f1bef4a6928