4.5.1.9 CDE - /etc/dt/config/Xconfig permissions and ownership

Information

The /etc/dt/config/Xconfig file is used to customize CDE DT login attributes. Ensure this file is owned by root:bin and permissions prevent group and other from writing to the file.

Rationale:

The /etc/dt/config/Xconfig file can be used to customize CDE DT login attributes. The default file, /usr/dt/config/Xconfig, is unconditionally overwritten upon subsequent installation. It is recommended that the appropriate permissions and ownership are applied to secure the file.

Solution

Check to see if the /etc/dt/config/Xconfig exists:

ls -l /etc/dt/config/Xconfig

Apply the appropriate ownership and permissions to /etc/dt/config/Xconfig:

chown root:bin /etc/dt/config/Xconfig
chmod go-w /etc/dt/config/Xconfig

Default Value:

N/A

See Also

https://workbench.cisecurity.org/benchmarks/13069

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3

Plugin: Unix

Control ID: 7b7c6b60c905b1d1c6f663c9ba51eae007d6e1f521258eac292c5e9614b1ffcd