Detections
Analytics

GEN003140 - Cron and crontab directories must be group-owned by root, sys, or bin.

Information

To protect the integrity of scheduled system jobs and to prevent malicious modification to these jobs, crontab files must be secured. Failure to give group-ownership of cron or crontab directories to a system group provides the designated group and unauthorized users with the potential to access sensitive information or change the system configuration which could weaken the system's security posture.

Solution

Change the group owner of the crontab directories to root, sys, or bin.

Procedure:
# chgrp root /var/spool/cron/crontabs

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227751r603266_rule, STIG-ID|GEN003140, STIG-Legacy|SV-27347, STIG-Legacy|V-981, Vuln-ID|V-227751

Plugin: Unix

Control ID: ac640ad601f9e3573f2f02b4be6c8a9eb87003b697878e1ffaa1c10b5c2ebde8