Files executed through a mail aliases file must not have extended ACLs.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-227842	GEN004430	SV-227842r603266_rule		Medium

Description
Excessive permissions on files executed through a mail alias file could result in modification by an unauthorized user, execution of malicious code, and/or system compromise.

STIG	Date
Solaris 10 X86 Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-30004r489901_chk )
Examine the contents of the /etc/mail/aliases file. For each file referenced, check the permissions of the file. # ls -lL [file referenced from aliases] If the permissions include a "+", the file has an extended ACL and this is a finding.

Fix Text (F-29992r489902_fix)
Remove the extended ACL from the file. # chmod A- [file referenced from aliases]