Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-4274 | GEN006280 | SV-39252r1_rule | ECLP-1 | Medium |
Description |
---|
Excessive permissions on the hosts.nntp.nolimit file may allow unauthorized modification which could lead to denial of service to authorized users or provide access to unauthorized users. |
STIG | Date |
---|---|
Draft AIX Security Technical Implementation Guide | 2011-08-17 |
Check Text ( C-38226r1_chk ) |
---|
Check /etc/news/hosts.nntp.nolimit permissions. # find / -name hosts.nntp.nolimit # ls –lL < hosts.nntp.nolimit file > If hosts.nntp.nolimit has a mode more permissive than 0600, this is a finding. |
Fix Text (F-33501r1_fix) |
---|
Change the mode of hosts.nntp.nolimit to 0600. # chmod 0600 < hosts.nntp.nolimit file> |