UCF STIG Viewer Logo

Cron must not execute group-writable or world-writable programs.


Overview

Finding ID Version Rule ID IA Controls Severity
V-976 GEN003000 SV-27329r1_rule DCSL-1 Medium
Description
If cron executes group-writable or world-writable programs, there is a possibility that unauthorized users could manipulate the programs with malicious intent. This could compromise system and network security.
STIG Date
Draft AIX Security Technical Implementation Guide 2011-08-17

Details

Check Text ( C-28464r1_chk )
List all cronjobs on the system.
Procedure:
# ls /var/spool/cron/crontabs/

If cron jobs exist under any of the above directories, search for programs executed by cron.
Procedure:
# more

Determine if the file is group-writable or world-writable.
Procedure:
# ls -la

If cron executes group-writable or world-writable files, this is a finding.
Fix Text (F-1130r3_fix)
Remove the world-writable and group-writable permissions from the cron program file(s) identified.
# chmod go-w