The snmpd.conf file must have mode 0600 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-994	GEN005320	SV-40262r1_rule	ECLP-1	Medium

Description
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification.

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2014-04-04

Details

Check Text ( C-39118r1_chk )
Check the mode of the SNMP daemon configuration files. Procedure: # ls -lL /etc/sma/snmp/snmpd.conf /etc/snmp/conf/snmpd.conf /var/sma_snmp/snmpd.conf /usr/sfw/lib/sma_snmp/snmpd.conf If any of the snmpd.conf files have a mode more permissive than 0600, this is a finding.

Fix Text (F-1148r2_fix)
Change the mode of the SNMP daemon configuration file to 0600. Procedure: # chmod 0600