UCF STIG Viewer Logo

Cron must not execute group-writable or world-writable programs.


Overview

Finding ID Version Rule ID IA Controls Severity
V-226615 GEN003000 SV-226615r603265_rule Medium
Description
If cron executes group-writable or world-writable programs, there is a possibility that unauthorized users could manipulate the programs with malicious intent. This could compromise system and network security.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-28776r483257_chk )
List all cronjobs on the system.
Procedure:
# ls /var/spool/cron/crontabs/

If cron jobs exist under any of the above directories search for programs executed by cron.
Procedure:
# more

Determine if the file is group-writable or world-writable.
Procedure:
# ls -la

If cron executes group-writable or world-writable files, this is a finding.
Fix Text (F-28764r483258_fix)
Remove the world-writable and group-writable permissions from the cron program file(s) identified.
# chmod go-w