Check: GEN005760
HP-UX 11.31 STIG:
GEN005760
(in versions v1 r19 through v1 r13)
Title
The Network File System (NFS) share configuration file must have mode 0644 or less permissive. (Cat III impact)
Discussion
Excessive permissions on the NFS share configuration file could allow unauthorized modification of the file, which could result in Denial-of-Service to authorized NFS shares and the creation of additional unauthorized shares.
Check Content
# echo `ls -lL /etc/dfs/dfstab` | tr '\011' ' ' | tr -s ' ' | sed -e 's/^[ \t]*//' | cut -f 1,1 -d " " If the file has a mode more permissive than 0644, this is a finding.
Fix Text
# chmod 0644 /etc/dfs/dfstab
Additional Identifiers
Rule ID: SV-35184r1_rule
Vulnerability ID: V-929
Group Title: GEN005760
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000225 |
The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions. |
Controls
Number | Title |
---|---|
AC-6 |
Least Privilege |