Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22564 | GEN008160 | SV-39907r1_rule | ECLP-1 | Medium |
Description |
---|
LDAP can be used to provide user authentication and account information, which are vital to system security. The LDAP client configuration must be protected from unauthorized modification |
STIG | Date |
---|---|
SOLARIS 10 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2018-04-10 |
Check Text ( C-38930r2_chk ) |
---|
Check if the system is using NSS LDAP. # grep -v '^#' /etc/nsswitch.conf | grep ldap If no lines are returned, this vulnerability is not applicable. Verify the group ownership of the certificate database files. # ls -lL /var/ldap/cert8.db /var/ldap/key3.db /var/ldap/secmod.db If the group owner of any of the files is not root, bin, or sys, this is a finding. |
Fix Text (F-34069r1_fix) |
---|
Change the group ownership of the certificate database files. # chgrp root /var/ldap/cert8.db /var/ldap/key3.db /var/ldap/secmod.db |