Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-239527 | VROM-SL-000540 | SV-239527r662032_rule | Medium |
Description |
---|
If the alias and aliases.db files are not owned by root, an unauthorized user may modify the file to add aliases to run malicious code or redirect email. |
STIG | Date |
---|---|
VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide | 2023-09-21 |
Check Text ( C-42760r662030_chk ) |
---|
Check the ownership of the alias file: # ls -lL /etc/aliases # ls -lL /etc/aliases.db If all the files are not owned by "root", this is a finding. |
Fix Text (F-42719r662031_fix) |
---|
Change the owner of the alias files to "root": # chown root /etc/aliases # chown root /etc/aliases.db |