UCF STIG Viewer Logo

The alias files must have mode 0644 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239529 VROM-SL-000550 SV-239529r662038_rule Medium
Description
Excessive permissions on the alias files may permit unauthorized modification. If an alias file is modified by an unauthorized user, they may modify the file to run malicious code or redirect email.
STIG Date
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide 2021-07-01

Details

Check Text ( C-42762r662036_chk )
Check the permissions of the alias files:

# ls -lL /etc/aliases
# ls -lL /etc/aliases.db

If the alias files have a mode more permissive than "0644", this is a finding.
Fix Text (F-42721r662037_fix)
Change the mode of the alias files to "0644":

# chmod 0644 /etc/aliases /etc/aliases.db