Check: GEN003190

Solaris 9 X86 STIG: GEN003190 (in version v1 r9)

The cron log files must not have extended ACLs. (Cat II impact)

Cron logs contain reports of scheduled system activities and must be protected from unauthorized access or manipulation.

Check the permissions of the file. # ls -lL /var/cron/log If the permissions include a "+", the file has an extended ACL and this is a finding.

Remove the extended ACL from the file. # getfacl /var/cron/log Remove each ACE returned. # setfacl -d [ACE] /var/cron/log

Rule ID: SV-26541r1_rule

Vulnerability ID: V-22388

Group Title:

Expert comments are only available to logged-in users.

CCIs tied to check.

Number	Definition
CCI-000225	The organization employs the concept of least privilege, allowing only authorized accesses for users (and processes acting on behalf of users) which are necessary to accomplish assigned tasks in accordance with organizational missions and business functions.

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-6	Least Privilege