UCF STIG Viewer Logo

Crontab files must be group-owned by root, sys, or the crontab creator's primary group.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22385 GEN003050 SV-41044r1_rule ECLP-1 Medium
Description
To protect the integrity of scheduled system jobs and prevent malicious modification to these jobs, crontab files must be secured.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-39665r1_chk )
Check the group ownership of the crontab files.
# ls -lL /var/spool/cron/crontabs/
If the group owner is not root, sys, or the crontab owner's primary group, this is a finding.
Fix Text (F-34811r1_fix)
Change the group owner of the crontab file to root, sys, or the crontab's primary group.
Procedure:
# chgrp root [crontab file]