The snmpd.conf file must have mode 0600 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-994	GEN005320	SV-37696r1_rule	ECLP-1	Medium

Description
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification.

STIG	Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide	2017-03-01

Details

Check Text ( C-36892r1_chk )
Check the mode of the SNMP daemon configuration file. Procedure: Examine the default install location /etc/snmp/snmpd.conf or: # find / -name snmpd.conf # ls -lL If the snmpd.conf file has a mode more permissive than 0600, this is a finding.

Fix Text (F-31997r1_fix)
Change the mode of the SNMP daemon configuration file to 0600. Procedure: # chmod 0600