UCF STIG Viewer Logo

The hosts.lpd (or equivalent) file must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22436 GEN003950 SV-35150r1_rule ECLP-1 Medium
Description
Excessive permissions on the hosts.lpd (or equivalent) file may permit unauthorized modification. Unauthorized modifications could disrupt access to local printers from authorized remote hosts or permit unauthorized remote access to local printers.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-09-14

Details

Check Text ( C-36550r1_chk )
Locate any print service configuration file(s) on the system. HP vendor documentation
identifies the following names and locations of print service configuration files on
the system that can be checked via the following commands:
# ls -lL /var/spool/lp/.rhosts
# ls -lL /var/adm/inetd.sec
# ls -lL /etc/hosts.equiv

If the permissions include a "+", the file has an extended ACL, this is a finding.
Fix Text (F-31916r1_fix)
Remove the optional ACL from the file.
# chacl -z