Check: GEN002960
HP-UX 11.31 STIG:
GEN002960
(in versions v1 r19 through v1 r13)
Title
Access to the cron utility must be controlled using the cron.allow and/or cron.deny file(s). (Cat II impact)
Discussion
The cron facility allows users to execute recurring jobs on a regular and unattended basis. The cron.allow file designates accounts allowed to enter and execute jobs using the cron facility. If neither cron.allow nor cron.deny exists, then any account may use the cron facility. This may open the facility up for abuse by system intruders and malicious users.
Check Content
Check for the existence of the cron.allow and cron.deny files. # ls -lL /var/adm/cron/cron.allow # ls -lL /var/adm/cron/cron.deny If neither file exists, this is a finding.
Fix Text
Create /var/adm/cron/cron.allow and/or /var/adm/cron/cron.deny with appropriate local content.
Additional Identifiers
Rule ID: SV-38541r1_rule
Vulnerability ID: V-974
Group Title: GEN002960
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000225 |
The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions. |
Controls
| Number | Title |
|---|---|
| AC-6 |
Least Privilege |