Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22591 | GEN000000-HPUX0110 | SV-26994r1_rule | ECLP-1 | Medium |
Description |
---|
File system extended ACLs provide access to files beyond what is allowed by the mode numbers of the files. Unauthorized modification of the /etc/securetty file could cause Denial of Service to authorized system consoles or add unauthorized system consoles. |
STIG | Date |
---|---|
HP-UX 11.23 Security Technical Implementation Guide | 2013-07-02 |
Check Text ( C-27937r1_chk ) |
---|
Check the permissions of the file. # ls -lLd /etc/securetty If the permissions of the file or directory contains a '+', an extended ACL is present, and this is a finding. |
Fix Text (F-24260r1_fix) |
---|
Remove the optional ACL from the file. # chacl -z /etc/securetty |