Title

The "at" directory must be group-owned by root, bin, or sys. (Cat II impact)

Discussion

If the "at" directory's group owner is not root, bin, or sys, unauthorized users could be allowed to view or edit files containing sensitive information within the directory.

Check Content

Check the group ownership of the "at" directory. Procedure: # ls -lLd /var/spool/cron/atjobs If the "at" directory is not group-owned by root, bin, or sys, this is a finding.

Fix Text

Change the group ownership of the "at" directory to root, bin, or sys. Procedure: # chgrp sys /var/spool/cron/atjobs

Additional Identifiers

Rule ID: SV-227774r603266_rule

Vulnerability ID: V-227774

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.