GEN003280 - Access to the at utility must be controlled via the at.allow and/or at.deny file(s).

Information

The at facility selectively allows users to execute jobs at deferred times. It is usually used for one-time jobs. The at.allow file selectively allows access to the at facility. If there is no at.allow file, there is no ready documentation of who is allowed to submit at jobs.

Solution

Create at.allow and/or at.deny files containing appropriate lists of users to be allowed or denied access to the 'at' daemon.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3(4), CAT|II, CCI|CCI-002165, Rule-ID|SV-226860r854425_rule, STIG-ID|GEN003280, STIG-Legacy|SV-27376, STIG-Legacy|V-984, Vuln-ID|V-226860

Plugin: Unix

Control ID: 6c43e7c66a43e8259a966fba04795c6a6f662c5ba99a2a8e6923f7af5ded36f4