Cron must not execute group-writable or world-writable programs.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-976	GEN003000	SV-976r2_rule	DCSL-1	Medium

Description
If cron executes group-writable or world-writable programs, there is a possibility that unauthorized users could manipulate the programs with malicious intent. This could compromise system and network security.

STIG	Date
VMware ESX 3 Server	2016-05-13

Details

Check Text ( C-788r2_chk )
List all cron jobs on the system. If any cron job executes a program with group-writable or world-writable permissions, this is a finding.

Fix Text (F-1130r2_fix)
Remove the world-writable and group-writable permissions from the cron program file(s) identified. # chmod go-w