← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-4275

CAT II (Medium)

The /etc/news/readers.conf (or equivalent) must have mode 0600 or less permissive.

Rule ID

SV-45896r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000225

Discussion

Excessive permissions on the readers.conf file may allow unauthorized modification which could lead to Denial of Service to authorized users or provide access to unauthorized users.

Check Content

Check the permissions for "/etc/news/readers.conf".

# ls -lL /etc/news/readers.conf

If /etc/news/readers.conf has a mode more permissive than 0600, this is a finding.

Fix Text

Change the mode of the /etc/news/readers.conf file to 0600.
# chmod 0600 /etc/news/readers.conf