The alias files must be group-owned by root, or a system group.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-239528	VROM-SL-000545	SV-239528r662035_rule		Medium

Description
If the aliases and aliases.db file are not group-owned by root or a system group, an unauthorized user may modify one or both of the files to add aliases to run malicious code or redirect email.

STIG	Date
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide	2021-07-01

Details

Check Text ( C-42761r662033_chk )
Check the group ownership of the alias files: # ls -lL /etc/aliases # ls -lL /etc/aliases.db If the files are not group-owned by "root", this is a finding.

Fix Text (F-42720r662034_fix)
Change the group owner of the alias files to "root": # chgrp root /etc/aliases # chgrp root /etc/aliases.db