VMware ESX 3 Server

The VMware ESX 3 Server (V1 R2) has 630 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

630STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jul 22 2016

The alias file must not have an extended ACL.

VMware ESX 3 Server

Assessment Title

Rule Text

The alias file must not have an extended ACL.

Description

Discussion Text

Excessive permissions on the aliases file may permit unauthorized modification. If the alias file is modified by an unauthorized user, they may modify the file to run malicious code or redirect email.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-22439

Rule

SV-26108r1_rule

Severity

medium

Rule Version

GEN004390

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the permissions of the /etc/mail/aliases file.
# ls -lL /etc/mail/aliases
If the permissions include a "+", the file has an extended ACL, this is a finding.

Implementation Procedure

Fix Text

Remove the extended ACL from the alias file.

STIG check 273 of 630 in the VMware ESX 3 Server STIG checklist

← Previous · V-22438The aliases file must be group-owned by root, sys, bin, or system.Next · V-22441 →Files executed through a mail aliases file must not have extended ACLs.