← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-4358

CAT II (Medium)

The cron.deny file must have mode 0600 or less permissive.

Rule ID

SV-45626r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000225

Discussion

If file permissions for cron.deny are more permissive than 0600, sensitive information could be viewed or edited by unauthorized users.

Check Content

Check the mode of the cron.deny file.
# ls -lL /etc/cron.deny
If the cron.deny file does not exist this is not a finding.
If the cron.deny file exists and the mode is more permissive than 0600, this is a finding.

Fix Text

Change the mode of the cron.deny file.
# chmod 0600 /etc/cron.deny