The at.deny file must have mode 0600 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22392	GEN003252	SV-26043r1_rule	ECLP-1	Medium

Description
The "at" daemon control files restrict access to scheduled job manipulation and must be protected. Unauthorized modification of the at.deny file could result in Denial-of-Service to authorized "at" users or provide unauthorized users with the ability to run "at" jobs.

STIG	Date
VMware ESX 3 Server	2016-05-13

Details

Check Text ( C-29226r1_chk )
Determine the mode of the at.deny file. # ls -lL at.deny If the mode of the at.deny file is more permissive than 0600, this is a finding.

Fix Text (F-26247r1_fix)
Change the mode of the at.deny file to 0600. # chmod 0600 at.deny