The "at" directory must have mode 0755 or less permissive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-4364 | GEN003400 | SV-4364r2_rule | ECLP-1 | Medium |
| Description |
|---|
| If the "at" directory has a mode more permissive than 0755, unauthorized users could be allowed to view or to edit files containing sensitive information within the "at" directory. Unauthorized modifications could result in Denial-of-Service to authorized "at" jobs. |
| STIG | Date |
|---|---|
| UNIX SRG | 2013-03-26 |
Details
| Check Text ( C-8245r2_chk ) |
|---|
| Check the mode of the "at" directory. Procedure: # ls -ld /var/spool/cron/atjobs /var/spool/atjobs /var/spool/at If the directory mode is more permissive than 0755, this is a finding. |
| Fix Text (F-4275r2_fix) |
|---|
| Change the mode of the "at" directory to 0755. Procedure: # chmod 0755 < at directory > |