The system must not allow users to configure .forward files.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-48065 | SOL-11.1-070170 | SV-60937r1_rule | Medium |
| Description |
|---|
| Use of the .forward file poses a security risk in that sensitive data may be inadvertently transferred outside the organization. The .forward file also poses a secondary risk as it can be used to execute commands that may perform unintended actions. |
| STIG | Date |
|---|---|
| Solaris 11 SPARC Security Technical Implementation Guide | 2017-04-28 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-51673r1_fix) |
|---|
| The root role is required. Remove any .forward files that are found. # pfexec rm [filename] |