← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-22440

CAT II (Medium)

Files executed through a mail aliases file must be group-owned by root, bin, sys, or system, and must reside within a directory group-owned by root, bin, sys, or system.

Rule ID

SV-45852r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000225

Discussion

If a file executed through a mail aliases file is not group-owned by root or a system group, it may be subject to unauthorized modification. Unauthorized modification of files executed through aliases may allow unauthorized users to attain root privileges.

Check Content

Examine the contents of the /etc/aliases file.

Procedure:
# more /etc/aliases
Examine the aliases file for any utilized directories or paths.

# ls -lL <file referenced from aliases>
Check the permissions for any paths referenced. 
If the group owner of any file is not root, bin, sys, or system, this is a finding.

Fix Text

Change the group ownership of the file referenced from /etc/aliases.

Procedure:
# chgrp root <file referenced from aliases>