UCF STIG Viewer Logo

The HP-UX /etc/securetty file must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22591 GEN000000-HPUX0110 SV-26994r1_rule ECLP-1 Medium
Description
File system extended ACLs provide access to files beyond what is allowed by the mode numbers of the files. Unauthorized modification of the /etc/securetty file could cause Denial of Service to authorized system consoles or add unauthorized system consoles.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-09-14

Details

Check Text ( C-27937r1_chk )
Check the permissions of the file.
# ls -lLd /etc/securetty
If the permissions of the file or directory contains a '+', an extended ACL is present, and this is a finding.
Fix Text (F-24260r1_fix)
Remove the optional ACL from the file.
# chacl -z /etc/securetty