GEN000000-SOL00600 - The /etc/zones directory, and its contents, must not have an extended ACL.

Information

Solaris zones configuration files must be protected against illicit creation, modification, and deletion.

Solution

Remove the extended ACL from the file.
# chmod A- <file>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227552r603266_rule, STIG-ID|GEN000000-SOL00600, STIG-Legacy|SV-27020, STIG-Legacy|V-22606, Vuln-ID|V-227552

Plugin: Unix

Control ID: cc4108059f82a4d8254a19fe8bbf70120a3e9ce01fed00a997f48c8d4929e6ba