GEN003110 - Cron and crontab directories must not have extended ACLs - '/var/spool/cron' - no acls enabled

Information

To protect the integrity of scheduled system jobs and to prevent malicious modification to these jobs, crontab files must be secured. ACLs on cron and crontab directories may provide unauthorized access to these directories. Unauthorized modifications to these directories or their contents may result in the addition of unauthorized cron jobs or deny service to authorized cron jobs.

Solution

Remove the extended ACL from the crontab file(s) and disable extended permissions.

#acledit <directory>/<file>

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22387, Rule-ID|SV-39103r1_rule, STIG-ID|GEN003110, Vuln-ID|V-22387

Plugin: Unix

Control ID: a09d8d12ba0a3a23be657598853ff7f1f7ce0d45d43d638c133dc11ae4002a5f