Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-91587 | AIX7-00-002077 | SV-101685r1_rule | Medium |
Description |
---|
Failure to give ownership of sensitive files or utilities to system groups may provide unauthorized users with the potential to access sensitive information or change the system configuration which could weaken the system's security posture. |
STIG | Date |
---|---|
IBM AIX 7.x Security Technical Implementation Guide | 2020-02-24 |
Check Text ( C-90741r1_chk ) |
---|
Check the ownership of "/etc/inetd.conf": # ls -l /etc/inetd.conf | awk '{print $1 " " $3 " " $4 " " $9}' The above command should yield the following output: -rw-r--r-- root system /etc/inetd.conf If it does not, this is a finding. |
Fix Text (F-97785r1_fix) |
---|
Change the "mode-bit" and the ownership of "/etc/inetd.conf": # chmod 644 /etc/inetd.conf # chown root:system /etc/inetd.conf |