← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-928

CAT II (Medium)

The Network File System (NFS) export configuration file must be owned by root.

Rule ID

SV-46117r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000225

Discussion

Failure to give ownership of the NFS export configuration file to root provides the designated owner and possible unauthorized users with the potential to change system configuration which could weaken the system's security posture.

Check Content

Check the owner of the exports file.

Example:
# ls -lL /etc/exports

If the export configuration file is not owned by root, this is a finding.

Fix Text

Change the owner of the exports file to root.

Example:
# chown root /etc/exports