Crontab files must have mode 0600 or less permissive, and files in cron script directories must have mode 0700 or less permissive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-978 | GEN003080 | SV-978r2_rule | ECLP-1 | Medium |
| Description |
|---|
| To protect the integrity of scheduled system jobs and prevent malicious modification to these jobs, crontab files must be secured. |
| STIG | Date |
|---|---|
| UNIX SRG | 2013-03-26 |
Details
| Check Text ( C-790r2_chk ) |
|---|
| Check the modes of the crontab and cron job script files. If the mode is more permissive than 0600 for crontab files or 0700 for cron job script files, this is a finding. |
| Fix Text (F-1132r2_fix) |
|---|
| Change the modes of crontab files to 0600 and cron job script files to 0700. |