Detections
Analytics
GEN004410 - Files executed through a mail aliases file must be group-owned by root, bin, or sys, and must reside within a directory group-owned by root, bin, or sys.
Information
If a file executed through a mail aliases file is not group-owned by root or a system group, it may be subject to unauthorized modification. Unauthorized modification of files executed through aliases may allow unauthorized users to attain root privileges.NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Change the group ownership of the file referenced from /etc/mail/aliases.Procedure:
# chgrp root <file referenced from aliases>
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 X86 v2r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227841r603266_rule, STIG-ID|GEN004410, STIG-Legacy|SV-39904, STIG-Legacy|V-22440, Vuln-ID|V-227841
Plugin: Unix
Control ID: 322d1695c59863406428150ccf05398d373dbdbc42c0f3b012ffb1e4e58aa4fc