Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22451 | GEN005365 | SV-38921r1_rule | ECLP-1 | Medium |
Description |
---|
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification. If the file is not group-owned by a system group, it may be subject to access and modification from unauthorized users. |
STIG | Date |
---|---|
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2017-12-08 |
Check Text ( C-37062r1_chk ) |
---|
Determine the group owner of the SNMP configuration files. Procedure: # ls -lL /etc/snmpd.conf /etc/snmpdv3.conf If the file is not group owned by bin, sys, or system, this is a finding. |
Fix Text (F-33455r1_fix) |
---|
Change the group owner of the SNMP configuration files. Procedure: # chgrp system /etc/snmpd.conf # chgrp system /etc/snmpdv3.conf |