← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-929

CAT III (Low)

The Network File System (NFS) export configuration file must have mode 0644 or less permissive.

Rule ID

SV-46119r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000225

Discussion

Excessive permissions on the NFS export configuration file could allow unauthorized modification of the file, which could result in Denial of Service to authorized NFS exports and the creation of additional unauthorized exports.

Check Content

# ls -lL /etc/exports
If the file has a mode more permissive than 0644, this is a finding.

Fix Text

# chmod 0644 /etc/exports