UCF STIG Viewer Logo

Cron must not execute group-writable or world-writable programs.


Overview

Finding ID Version Rule ID IA Controls Severity
V-227741 GEN003000 SV-227741r603266_rule Medium
Description
If cron executes group-writable or world-writable programs, there is a possibility that unauthorized users could manipulate the programs with malicious intent. This could compromise system and network security.
STIG Date
Solaris 10 X86 Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-29903r488807_chk )
List all cronjobs on the system.
Procedure:
# ls /var/spool/cron/crontabs/

If cron jobs exist under any of the above directories search for programs executed by cron.
Procedure:
# more

Determine if the file is group-writable or world-writable.
Procedure:
# ls -la

If cron executes group-writable or world-writable files, this is a finding.
Fix Text (F-29891r488808_fix)
Remove the world-writable and group-writable permissions from the cron program file(s) identified.
# chmod go-w