The /usr/aset/userlist file must not have an extended ACL.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22601	GEN000000-SOL00270	SV-27014r1_rule	ECLP-1	Medium

Description
File system ACLs can provide access to files beyond what is allowed by the mode numbers of the files.

STIG	Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE	2015-10-01

Details

Check Text ( C-27948r1_chk )
Check the permissions of the file. # ls -lLd /usr/aset/userlist If the permissions of the file or directory contains a "+", an extended ACL is present, this is a finding.

Fix Text (F-24281r1_fix)
Remove the extended ACL from the file. # getfacl /usr/aset/userlist Remove each ACE returned. # setfacl -d [ACE] /usr/aset/userlist