The snmpd.conf file must have mode 0600 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-994	GEN005320	SV-63425r1_rule		Medium

Description
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification.

STIG	Date
Oracle Linux 5 Security Technical Implementation Guide	2016-06-01

Details

Check Text ( C-52129r2_chk )
Check the mode of the SNMP daemon configuration file. Procedure: Examine the default install location /etc/snmp/snmpd.conf or: # find / -name snmpd.conf # ls -lL If the snmpd.conf file has a mode more permissive than 0600, this is a finding.

Fix Text (F-54031r2_fix)
Change the mode of the SNMP daemon configuration file to 0600. Procedure: # chmod 0600