Files executed through a mail aliases file must not have extended ACLs.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22441	GEN004430	SV-38810r1_rule	ECLP-1	Medium

Description
Excessive permissions on files executed through a mail alias file could result in modification by an unauthorized user, execution of malicious code, and/or system compromise.

STIG	Date
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2018-09-18

Details

Check Text ( C-36885r1_chk )
Examine the contents of the /etc/mail/aliases file. For each file referenced, check the permissions of the file. #aclget [File referenced from alias] Check if extended permissions are disabled. If extended permissions are not disabled, this is a finding.

Fix Text (F-31912r1_fix)
Remove the extended ACL from the file(s) referenced from the aliases file and disable extended permissions. #acledit [File referenced from aliases]