UCF STIG Viewer Logo

The NFS export configuration file must be group-owned by root, bin, or sys.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227007 GEN005750 SV-227007r603265_rule Medium
Description
Failure to give group ownership of the NFS export configuration file to root or system groups provides the designated group owner and possible unauthorized users with the potential to change system configuration which could weaken the system's security posture.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2020-12-04

Details

Check Text ( C-29169r485366_chk )
Check the group ownership of the NFS export configuration file.

Procedure:
# ls -lL /etc/dfs/dfstab

If the file is not group-owned by root, bin, or sys, this is a finding.
Fix Text (F-29157r485367_fix)
Change the group ownership of the NFS export configuration file.

Procedure:
# chgrp root /etc/dfs/dfstab