UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The /etc/sysctl.conf file must have mode 0600 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4336 GEN000000-LNX00520 SV-62963r1_rule Medium
Description
The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the system's security.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2018-03-01

Details

Check Text ( C-51763r2_chk )
Check /etc/sysctl.conf permissions:

# ls -lL /etc/sysctl.conf

If /etc/sysctl.conf has a mode more permissive than 0600, this is a finding.
Fix Text (F-53539r1_fix)
Use the chmod command to change the mode of the /etc/sysctl.conf file.
# chmod 0600 /etc/sysctl.conf