UCF STIG Viewer Logo

The snmpd.conf file must have mode 0600 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-994 GEN005320 SV-994r2_rule ECLP-1 Medium
Description
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-817r2_chk )
Check the mode of the SNMP daemon configuration file.

Locate the SNMP daemon configuration file. Consult vendor documentation to verify the name and location of the file.
Procedure:
# find / -name snmpd.conf

Check the mode of the SNMP daemon configuration file.
Procedure:
# ls -lL

If the snmpd.conf file has a mode more permissive than 0600, this is a finding.
Fix Text (F-1148r2_fix)
Change the mode of the SNMP daemon configuration file to 0600.

Procedure:
# chmod 0600