GEN001290 - All manual page files must not have extended ACLs.

Information

If manual pages are compromised, misleading information could be inserted, causing actions that may compromise the system.

Solution

Remove the extended ACL from the file.
# chmod A- [file with extended ACL]

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Audit Name: DISA STIG Solaris 10 SPARC v2r4

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-226496r603265_rule, STIG-ID|GEN001290, STIG-Legacy|SV-26373, STIG-Legacy|V-22316, Vuln-ID|V-226496

Plugin: Unix

Control ID: 15be37c3f332d9540d84ede34031a0910d300828bd813e9762ffcd8201dfc89a