← Back to Xylok Security Suite 20.x Security Technical Implementation Guide

V-269582

CAT II (Medium)

The Xylok Security Suite configuration file must be protected.

Rule ID

SV-269582r1053521_rule

STIG

Xylok Security Suite 20.x Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-001813

Discussion

Protecting the configuration file is a fundamental aspect of maintaining the security, integrity, and stability of Xylok Security Suite. By implementing robust protection mechanisms, Xylok can safeguard sensitive information, ensure compliance, and enhance operational reliability while minimizing the risks associated with unauthorized access and misconfigurations.

Check Content

Check the Xylok configuration file permissions with the following command:

$ ls -l /etc/xylok.conf

If this file has permissions greater than "0644", this is a finding.

Fix Text

As root, correct permissions for xylok.conf by running:

    # chmod 0644 /etc/xylok.conf