Check: GEN000000-LNX00450
SUSE Linux Enterprise Server v11 for System z STIG:
GEN000000-LNX00450
(in versions v1 r12 through v1 r9)
Title
The /etc/security/access.conf file must not have an extended ACL. (Cat II impact)
Discussion
If the access permissions are more permissive than 0640, system security could be compromised.
Check Content
Check the permissions of the file. # ls -lLd /etc/security/access.conf If the permissions of the file or directory contains a '+', an extended ACL is present. If the file has an extended ACL and it has not been documented with the IAO, this is a finding.
Fix Text
Remove the extended ACL from the file. # setfacl --remove-all /etc/security/access.conf
Additional Identifiers
Rule ID: SV-44757r1_rule
Vulnerability ID: V-22595
Group Title: GEN000000-LNX00450
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000225 |
Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) which are necessary to accomplish assigned organizational tasks. |
| CCI-000366 |
Implement the security configuration settings. |