Check: GEN003760
SOLARIS 9 SPARC STIG:
GEN003760
(in version v1 r12)
Title
The services file must be owned by root or bin. (Cat II impact)
Discussion
Failure to give ownership of sensitive files or utilities to root or bin provides the designated owner and unauthorized users with the potential to access sensitive information or change the system configuration which could weaken the system's security posture.
Check Content
Fix Text
Change the ownership of the services file to root or bin. Procedure: # chown root /etc/services
Additional Identifiers
Rule ID: SV-823r2_rule
Vulnerability ID: V-823
Group Title: GEN003760
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000225 |
Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) which are necessary to accomplish assigned organizational tasks. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AC-6 |
Least Privilege |