The snmpd.conf file must have mode 0600 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-226971	GEN005320	SV-226971r603265_rule		Medium

Description
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification.

STIG	Date
Solaris 10 SPARC Security Technical Implementation Guide	2020-12-04

Details

Check Text ( C-29133r485243_chk )
Check the mode of the SNMP daemon configuration files. Procedure: # ls -lL /etc/sma/snmp/snmpd.conf /etc/snmp/conf/snmpd.conf /var/sma_snmp/snmpd.conf /usr/sfw/lib/sma_snmp/snmpd.conf If any of the snmpd.conf files have a mode more permissive than 0600, this is a finding.

Fix Text (F-29121r485244_fix)
Change the mode of the SNMP daemon configuration file to 0600. Procedure: # chmod 0600