Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22452 | GEN005375 | SV-26737r1_rule | ECLP-1 | Medium |
Description |
---|
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification. |
STIG | Date |
---|---|
SOLARIS 10 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2018-04-10 |
Check Text ( C-27753r1_chk ) |
---|
Check the permissions of the SNMP configuration files. # ls -lL/etc/sma/snmp/snmpd.conf /var/sma_snmp/snmpd.conf /etc/snmp/conf/snmpd.conf /usr/sfw/lib/sma_snmp/snmpd.conf If the permissions include a "+", the file has an extended ACL and this is a finding. |
Fix Text (F-23987r1_fix) |
---|
Remove the extended ACL from the files. # chmod A- /etc/sma/snmp/snmpd.conf /var/sma_snmp/snmpd.conf /etc/snmp/conf/snmpd.conf /usr/sfw/lib/sma_snmp/snmpd.conf |