HP-UX 11.31 Security Technical Implementation Guide

The HP-UX 11.31 Security Technical Implementation Guide (V1 R19) has 525 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

525STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R19

CurrentPublished Fri Jan 25 2019

All NFS-shared system files and system directories must be owned by root, or a system account.

HP-UX 11.31 Security Technical Implementation Guide

Assessment Title

Rule Text

All NFS-shared system files and system directories must be owned by root, or a system account.

Description

Discussion Text

Failure to give ownership of sensitive files or directories to root provides the designated owner and possible unauthorized users with the potential to access sensitive information or change system configuration which could weaken the system's security posture.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-931

Rule

SV-35191r3_rule

Severity

medium

Rule Version

GEN005800

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check for NFS shared file systems.
# cat /etc/dfs/sharetab

This will display all of the shared file systems. For each file system displayed, check the ownership.

Check the owner  of the NFS share configuration file.
# echo ` ls -lLad <shared file system path>` | tr '\011' ' ' | tr -s  ' ' | sed -e 's/^[  \t]*//'  

If the files and directories are not owned by root or a system account, this is a finding.

Implementation Procedure

Fix Text

Change the ownership of shared file systems not owned by root, or a system account.

# chown root <path>

STIG check 496 of 525 in the HP-UX 11.31 STIG checklist

← Previous · V-929The Network File System (NFS) share configuration file must have mode 0644 or less permissive.Next · V-932 →The Network File System (NFS) anonymous UID and GID must be configured to values that have no permissions.