The alias files must be owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-239527	VROM-SL-000540	SV-239527r662032_rule		Medium

Description
If the alias and aliases.db files are not owned by root, an unauthorized user may modify the file to add aliases to run malicious code or redirect email.

STIG	Date
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide	2021-07-01

Details

Check Text ( C-42760r662030_chk )
Check the ownership of the alias file: # ls -lL /etc/aliases # ls -lL /etc/aliases.db If all the files are not owned by "root", this is a finding.

Fix Text (F-42719r662031_fix)
Change the owner of the alias files to "root": # chown root /etc/aliases # chown root /etc/aliases.db