AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE

The AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE (V1 R14) has 506 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

506STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R14

CurrentPublished Fri Oct 26 2018

Cron must not execute group-writable or world-writable programs.

AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE

Assessment Title

Rule Text

Cron must not execute group-writable or world-writable programs.

Description

Discussion Text

If cron executes group-writable or world-writable programs, there is a possibility that unauthorized users could manipulate the programs with malicious intent. This could compromise system and network security.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-976

Rule

SV-27329r1_rule

Severity

medium

Rule Version

GEN003000

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

List all cronjobs on the system. 
Procedure: 
# ls /var/spool/cron/crontabs/

If cron jobs exist under any of the above directories search for programs executed by cron.
Procedure:
# more <cron job file>

Determine if the file is group-writable or world-writable.
Procedure:
# ls -la <cron program file>

If cron executes group-writable or world-writable files, this is a finding.

Implementation Procedure

Fix Text

Remove the world-writable and group-writable permissions from the cron program file(s) identified.
# chmod go-w <cron program file>

STIG check 490 of 506 in the AIX 6.1 STIG checklist

← Previous · V-975The cron.allow file must have mode 0600 or less permissive.Next · V-977 →Cron must not execute programs in, or subordinate to, world-writable directories.