Navigate

Check: GEN006280

Solaris 10 X86 STIG: GEN006280 (in versions v2 r4 through v1 r17)

Title

The /etc/news/hosts.nntp.nolimit (or equivalent) must have mode 0600 or less permissive. (Cat II impact)

Discussion

Excessive permissions on the hosts.nntp.nolimit file may allow unauthorized modification which could lead to Denial-of-Service to authorized users or provide access to unauthorized users.

Check Content

Check /etc/news/hosts.nntp.nolimit permissions. # ls -lL /etc/news/hosts.nntp.nolimit If /etc/news/hosts.nntp.nolimit has a mode more permissive than 0600, this is a finding.

Fix Text

Change the mode of /etc/news/hosts.nntp.nolimit to 0600. # chmod 0600 /etc/news/hosts.nntp.nolimit

Additional Identifiers

Rule ID: SV-227940r854516_rule

Vulnerability ID: V-227940

Group Title: SRG-OS-000312

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-002165	Enforce organization-defined discretionary access control policies over defined subjects and objects.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-3(4)	Discretionary Access Control