Detections
Analytics

GEN004370 - The aliases file must be group-owned by root, sys, smmsp, or bin.

Information

If the alias file is not group-owned by root or a system group, an unauthorized user may modify the file to add aliases to run malicious code or redirect email.

Solution

Change the group owner of the /etc/mail/aliases files.

Procedure:
# chgrp bin /etc/mail/aliases
# chgrp smmsp /etc/mail/aliases.db

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220098r858553_rule, STIG-ID|GEN004370, STIG-Legacy|SV-37458, STIG-Legacy|V-22438, Vuln-ID|V-220098

Plugin: Unix

Control ID: 5af5ad177f62b9213e88c93e8a00e6d9848497bc3970c0ac091b21e359f0bceb