UCF STIG Viewer Logo

The /etc/news/passwd.nntp file must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227038 GEN006330 SV-227038r603265_rule Medium
Description
Extended ACLs may provide excessive permissions on the /etc/news/passwd.nntp file, which may permit unauthorized access or modification to the NNTP configuration.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-29200r485468_chk )
Check the permissions of the file.
# ls -lL /etc/news/passwd.nntp
If the permissions include a "+", the file has an extended ACL, this is a finding.
Fix Text (F-29188r485469_fix)
Remove the extended ACL from the file.
# chmod A- /etc/news/passwd.nntp