V-4336

CAT II (Medium)

The /etc/sysctl.conf file must have mode 0600 or less permissive.

Rule ID

SV-44657r1_rule

STIG

Version

V1R12

CCIs

The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the system's security.

Check /etc/sysctl.conf permissions:

# ls -lL /etc/sysctl.conf

If /etc/sysctl.conf has a mode more permissive than 0600, this is a finding.

Use the chmod command to change the mode of the /etc/sysctl.conf file.
# chmod 0600 /etc/sysctl.conf