The NFS export configuration file must have mode 0644 or less permissive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-929 | GEN005760 | SV-929r2_rule | ECCD-1 ECCD-2 ECLP-1 | Low |
| Description |
|---|
| Excessive permissions on the NFS export configuration file could allow unauthorized modification of the file, which could result in Denial-of-Service to authorized NFS exports and the creation of additional unauthorized exports. |
| STIG | Date |
|---|---|
| UNIX SRG | 2013-03-26 |
Details
| Check Text ( C-856r2_chk ) |
|---|
| Check the ownership of the NFS export configuration file. If the file has a mode more permissive than 0644, this is a finding. |
| Fix Text (F-1083r2_fix) |
|---|
| Change the mode of the NFS export configuration file to 0644. # chmod 0644 |