Cron must not execute programs in, or subordinate to, world-writable directories.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-977 | GEN003020 | SV-977r2_rule | DCSL-1 | Medium |
| Description |
|---|
| If cron programs are located in or subordinate to world-writable directories, they become vulnerable to removal and replacement by malicious users or system intruders. |
| STIG | Date |
|---|---|
| VMware ESX 3 Server | 2016-05-13 |
Details
| Check Text ( C-789r2_chk ) |
|---|
| List all cron jobs on the system. If any cron job executes a program located in a world-writable directory, this is a finding. |
| Fix Text (F-1131r2_fix) |
|---|
| Remove the world-writable permission from the cron program directories identified. Procedure: # chmod o-w |