The /etc/news/nnrp.access (or equivalent) must have mode 0600 or less permissive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4275 | GEN006300 | SV-35118r1_rule | ECLP-1 | Medium |
| Description |
|---|
| Excessive permissions on the nnrp.access file may allow unauthorized modification which could lead to Denial of Service to authorized users or provide access to unauthorized users. |
| STIG | Date |
|---|---|
| HP-UX 11.31 Security Technical Implementation Guide | 2018-09-14 |
Details
| Check Text ( C-34971r1_chk ) |
|---|
| Check nnrp.access permissions. # find / -type f -name nnrp.access | xargs -n1 ls -lL If nnrp.access has a mode more permissive than 0600, this is a finding. |
| Fix Text (F-30266r1_fix) |
|---|
| Change the mode of the nnrp.access file to 0600. # chmod 0600 |