Detections
Analytics

GEN003410 - The 'at' directory must not have an extended ACL - at directory must not have an extended ACL.

Information

If the 'at' directory has an extended ACL, unauthorized users could be allowed to view or to edit files containing sensitive information within the 'at' directory. Unauthorized modifications could result in Denial of Service to authorized 'at' jobs.

Solution

Remove the extended ACL from the file.
# chmod A- /var/spool/cron/atjobs

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227772r603266_rule, STIG-ID|GEN003410, STIG-Legacy|SV-26566, STIG-Legacy|V-22395, Vuln-ID|V-227772

Plugin: Unix

Control ID: 296f227ba96c4f35d958bcafcd87038161da35cf1d9388758920dcd31429de18