Navigate

Check: GEN006260

Solaris 10 X86 STIG: GEN006260 (in versions v2 r4 through v1 r17)

Title

The /etc/news/hosts.nntp (or equivalent) must have mode 0600 or less permissive. (Cat II impact)

Discussion

Excessive permissions on the hosts.nntp file may allow unauthorized modification which could lead to Denial-of-Service to authorized users or provide access to unauthorized users.

Check Content

Check /etc/news/hosts.nntp permissions. # ls -lL /etc/news/hosts.nntp If /etc/news/hosts.nntp has a mode more permissive than 0600, this is a finding.

Fix Text

Change the mode of the /etc/news/hosts.nntp file to 0600. # chmod 0600 /etc/news/hosts.nntp

Additional Identifiers

Rule ID: SV-227938r854515_rule

Vulnerability ID: V-227938

Group Title: SRG-OS-000312

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-002165	The information system enforces organization-defined discretionary access control policies over defined subjects and objects.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-3 (4)	Discretionary Access Control