The snmpd.conf file must be group-owned by root, sys, or bin.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22451	GEN005365	SV-26732r1_rule	ECLP-1	Medium

Description
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification. If the file is not group-owned by a system group, it may be subject to access and modification from unauthorized users.

STIG	Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-10-01

Details

Check Text ( C-27748r1_chk )
Check the group ownership of the SNMP configuration file. Procedure: # ls -lL /etc/snmp.conf If the file is not group-owned by root, sys, or bin, this is a finding.

Fix Text (F-23981r1_fix)
Change the group ownership of the SNMP configuration file. Procedure: # chgrp root /etc/snmp.conf