Check: GEN000000-HPUX0060
HP-UX 11.31 STIG:
GEN000000-HPUX0060
(in versions v1 r19 through v1 r13)
Title
The /etc/securetty file must be owned by root. (Cat II impact)
Discussion
Failure to make root the owner of sensitive files and utilities may provide unauthorized owners the potential to access and/or change sensitive information or system configurations, thus weakening the overall security posture of a site.
Check Content
Check the ownership of the /etc/securetty file. ls -lL /etc/securetty If /etc/securetty is not owned by root, sys, or bin, this is a finding.
Fix Text
Change the owner of the /etc/securetty file to root. # chown root /etc/securetty
Additional Identifiers
Rule ID: SV-38682r1_rule
Vulnerability ID: V-966
Group Title: GEN000000-HPUX0060
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000225 |
The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions. |
| CCI-000366 |
The organization implements the security configuration settings. |