The snmpd.conf file must have mode 0600 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-994	GEN005320	SV-45955r1_rule		Medium

Description
The snmpd.conf file contains authenticators and must be protected from unauthorized access and modification.

STIG	Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide	2018-09-19

Details

Check Text ( C-43242r1_chk )
Check the mode of the SNMP daemon configuration file. Procedure: Examine the default install location /etc/snmp/snmpd.conf or: # find / -name snmpd.conf # ls -lL If the snmpd.conf file has a mode more permissive than 0600, this is a finding.

Fix Text (F-39321r1_fix)
Change the mode of the SNMP daemon configuration file to 0600. Procedure: # chmod 0600