Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The cron.allow file must be owned by root, bin, or sys.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4361 | GEN003240 | SV-27366r1_rule | ECLP-1 | Medium |
| Description |
|---|
| If the owner of the cron.allow file is not set to root, bin, or sys, the possibility exists for an unauthorized user to view or to edit sensitive information. |
| STIG | Date |
|---|---|
| SOLARIS 10 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2018-04-10 |
Details
| Check Text ( C-28510r1_chk ) |
|---|
| # ls -lL /etc/cron.d/cron.allow If the cron.allow file is not owned by root, sys, or bin, this is a finding. |
| Fix Text (F-24611r1_fix) |
|---|
| # chown root /etc/cron.d/cron.allow |