Detections
Analytics

GEN002990 - The cron.allow file must not have an extended ACL.

Information

A cron.allow file that is readable and/or writable by other than root could allow potential intruders and malicious users to use the file contents to help discern information, such as who is allowed to execute cron programs, which could be harmful to overall system and network security.

Solution

Remove the extended ACL from the file.
# chmod A- /etc/cron.allow

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-226614r603265_rule, STIG-ID|GEN002990, STIG-Legacy|SV-26528, STIG-Legacy|V-22384, Vuln-ID|V-226614

Plugin: Unix

Control ID: 060ebad11ed0ff375587283f02e2f50f261af314cc9af1394d7b8587ed55386d