Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-88535 | VROM-SL-000565 | SV-99185r1_rule | Medium |
Description |
---|
If a file executed through a mail alias file has permissions greater than 0755, it can be modified by an unauthorized user and may contain malicious code or instructions that could compromise the system. |
STIG | Date |
---|---|
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide | 2018-10-11 |
Check Text ( C-88227r1_chk ) |
---|
Examine the contents of the "/etc/aliases" file: # more /etc/aliases Examine the aliases file for any directories or paths that may be utilized: # ls -lL Check the permissions for any paths referenced. If any file referenced from the aliases file has a mode more permissive than "0755", this is a finding. |
Fix Text (F-95277r1_fix) |
---|
Use the chmod command to change the access permissions for files executed from the alias file: # chmod 0755 |