Navigate

Check: GEN006300

Solaris 10 SPARC STIG: GEN006300 (in versions v2 r4 through v1 r19)

Title

The /etc/news/nnrp.access (or equivalent) must have mode 0600 or less permissive. (Cat II impact)

Discussion

Excessive permissions on the nnrp.access file may allow unauthorized modification which could lead to Denial-of-Service to authorized users or provide access to unauthorized users.

Check Content

Check /etc/news/nnrp.access permissions. # ls -lL /etc/news/nnrp.access If /etc/news/nnrp.access has a mode more permissive than 0600, this is a finding.

Fix Text

Change the mode of the /etc/news/nnrp.access file to 0600. # chmod 0600 /etc/news/nnrp.access

Additional Identifiers

Rule ID: SV-227035r854450_rule

Vulnerability ID: V-227035

Group Title: SRG-OS-000312

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-002165	The information system enforces organization-defined discretionary access control policies over defined subjects and objects.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-3 (4)	Discretionary Access Control