UCF STIG Viewer Logo

The /etc/sysctl.conf file must have mode 0600 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4336 GEN000000-LNX00520 SV-4336r2_rule ECLP-1 Medium
Description
The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the system's security.
STIG Date
VMware ESX 3 Server 2016-05-13

Details

Check Text ( C-2141r2_chk )
Check /etc/sysctl.conf permissions:

# ls –lL /etc/sysctl.conf

If /etc/sysctl.conf has a mode more permissive than 0600, this is a finding.
Fix Text (F-4247r2_fix)
Use the chmod command to change the mode of the /etc/sysctl.conf file.
# chmod 0600 /etc/sysctl.conf