GEN003060 - Default system accounts (with the exception of root) must not be listed in the cron.allow file or must be included in the cron.deny file, if cron.allow does not exist.

Information

To centralize the management of privileged account crontabs, of the default system accounts, only root may have a crontab.

Solution

Remove default system accounts (such as bin, sys, adm, or others) from the cron.allow file if it exists, or add those accounts to the cron.deny file.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Audit Name: DISA STIG Solaris 10 X86 v2r4

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227745r603266_rule, STIG-ID|GEN003060, STIG-Legacy|SV-27335, STIG-Legacy|V-11995, Vuln-ID|V-227745

Plugin: Unix

Control ID: 365fba6a214cb7f7ebb4f4343be6e3ea44e3de1e8b22558a59e6dcd5a99eae81