← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-987

CAT II (Medium)

The at.allow file must have mode 0600 or less permissive.

Rule ID

SV-45667r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000225

Discussion

Permissions more permissive than 0600 (read, write and execute for the owner) may allow unauthorized or malicious access to the at.allow and/or at.deny files.

Check Content

Check the mode of the at.allow file.
# ls -lL /etc/at.allow
If the at.allow file has a mode more permissive than 0600, this is a finding.

Fix Text

Change the mode of the at.allow file.
# chmod 0600 /etc/at.allow