Title

The cron.allow file must be owned by root, bin, or sys. (Cat II impact)

Discussion

If the owner of the cron.allow file is not set to root, bin, or sys, the possibility exists for an unauthorized user to view or to edit sensitive information.

Check Content

# ls -lL /etc/cron.d/cron.allow If the cron.allow file is not owned by root, sys, or bin, this is a finding.

Fix Text

# chown root /etc/cron.d/cron.allow

Additional Identifiers

Rule ID: SV-226632r603265_rule

Vulnerability ID: V-226632

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.