UCF STIG Viewer Logo

The "at" directory must be group-owned by system, bin, sys, or cron.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22396 GEN003430 SV-39352r1_rule ECLP-1 Medium
Description
If the group of the "at" directory is not system, bin, sys, or cron, unauthorized users could be allowed to view or edit files containing sensitive information within the directory.
STIG Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2014-10-03

Details

Check Text ( C-38298r1_chk )
Check the group ownership of the file.

Procedure:
# ls -ld /var/spool/cron/atjobs

If the file is not group-owned by bin, sys, system, or cron, this is a finding.
Fix Text (F-33587r1_fix)
Change the group ownership of the file to bin, sys, system, or cron.

Procedure:
# chgrp cron /var/spool/cron/atjobs