The aliases file must be group-owned by wheel.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22438	GEN004370 M6	SV-38128r1_rule	ECLP-1	Medium

Description
If the alias file is not group-owned by a system group, an unauthorized user may modify the file to add aliases to run malicious code or redirect email.

STIG	Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide	2013-04-09

Details

Check Text ( C-37666r1_chk )
Open a terminal session and use the following command to verify the group ownership of the /etc/aliases file. ls -lL /etc/aliases If the /etc/aliases file is not group owned by wheel, this is a finding.

Fix Text (F-32907r1_fix)
Open a terminal session and enter the following command to set the group. chgrp wheel /etc/aliases