UCF STIG Viewer Logo

The at.deny file must not have an extended ACL.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22393 GEN003255 SV-26044r1_rule ECLP-1 Medium
Description
The "at" daemon control files restrict access to scheduled job manipulation and must be protected. Unauthorized modification of the at.deny file could result in Denial-of-Service to authorized "at" users or provide unauthorized users with the ability to run "at" jobs.
STIG Date
VMware ESX 3 Server 2016-05-13

Details

Check Text ( C-29228r1_chk )
Determine if the at.deny file has an extended ACL.
# ls -l at.deny
If the file's permissions contain a '+', the file has an extended ACL, this is a finding.
Fix Text (F-26249r1_fix)
Remove the extended ACL from the at.deny file.