Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-245564 | AIX7-00-002092 | SV-245564r755133_rule | Medium |
Description |
---|
Failure to give ownership of sensitive files or utilities to system groups may provide unauthorized users with the potential to access sensitive information or change the system configuration which could weaken the system's security posture. |
STIG | Date |
---|---|
IBM AIX 7.x Security Technical Implementation Guide | 2023-05-17 |
Check Text ( C-48843r755131_chk ) |
---|
Check the group ownership of "/etc/inetd.conf": # ls -al /etc/inetd.conf The above command should yield the following output: -rw-r----- root system /etc/inetd.conf If the file is not group owned by system, this is a finding. |
Fix Text (F-48798r755132_fix) |
---|
Change the group ownership of "/etc/inetd.conf": # chgrp system /etc/inetd.conf |