HP-UX 11.31 Security Technical Implementation Guide

The HP-UX 11.31 Security Technical Implementation Guide (V1 R19) has 525 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

525STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R19

CurrentPublished Fri Jan 25 2019

The NIS/NIS+/yp command files must have mode 0755 or less permissive.

HP-UX 11.31 Security Technical Implementation Guide

Assessment Title

Rule Text

The NIS/NIS+/yp command files must have mode 0755 or less permissive.

Description

Discussion Text

NIS/NIS+/yp files are part of the system's identification and authentication processes and are, therefore, critical to system security. Unauthorized modification of these files could compromise these processes and the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-791

Rule

SV-38462r1_rule

Severity

medium

Rule Version

GEN001360

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check NIS file mode.

Procedure:
# grep -i NIS_DOMAIN /etc/rc.config.d/namesvrs
# ls -lLa /var/yp/<NIS_DOMAIN>

If the file's mode is more permissive than 0755, this is a finding.

Implementation Procedure

Fix Text

Change the mode of NIS/NIS+/yp command files to 0755 or less permissive.

Procedure (example):
# chmod 0755 <filename>

STIG check 418 of 525 in the HP-UX 11.31 STIG checklist

← Previous · V-790NIS/NIS+/yp files must be group-owned by root, sys, bin, or other.Next · V-792 →Manual page files must have mode 0644 or less permissive.