UCF STIG Viewer Logo

The /etc/news/passwd.nntp file must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22505 GEN006330 SV-26849r1_rule ECLP-1 Medium
Description
Extended ACLs may provide excessive permissions on the /etc/news/passwd.nntp file, which may permit unauthorized access or modification to the NNTP configuration.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-27820r1_chk )
Check the permissions of the file.
# ls -lL /etc/news/passwd.nntp
If the permissions include a "+", the file has an extended ACL, this is a finding.
Fix Text (F-24093r1_fix)
Remove the extended ACL from the file.
# getfacl /etc/news/passwd.nntp
Remove each ACE returned.
# setfacl -d [ACE] /etc/news/passwd.nntp