9.21 Check for Presence of User .forward Files

Information

The .forward file specifies an email address to which a user's mail is forwarded.

Use of the .forward file poses a security risk in that sensitive data may be inadvertently transferred outside the organization. The .forward file also poses a secondary risk as it can be used to execute commands that may perform unintended actions.

Solution

Correct or justify any items discovered in the Audit step. Determine if any .forward files exist, and work with the owner to determine the best course of action in accordance with site policy.

See Also

https://workbench.cisecurity.org/files/612

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|9.1

Plugin: Unix

Control ID: 63d5d830110377d850abea706b3cb117fe131e77f1a11c2cca61a17c31f5885e