Ensure access to /etc/cron.yearly is configured

СредњаНиво 1Аутоматскаlinux

Опис

The /etc/cron.yearly directory contains system cron jobs that need to run on an annual basis. The files in this directory cannot be manipulated by the crontab command but are instead edited by system administrators using a text editor. The commands below restrict read/write and search access to user and group root, preventing regular users from accessing this directory.

Како се проверава

Метод провере: Команда љуске

shell

alt0() { s=$(stat -Lc '%a %u %g' /etc/cron.yearly/ 2>&1) || { echo "step1: $s"; return 1; }; set -- $s; m=$((8#$1)); [ $((m & ~0700)) -eq 0 ] && [ "$2" = 0 ] && [ "$3" = 0 ] || { echo "step1: /etc/cron.yearly/ is mode $1 uid $2 gid $3, want 700 or stricter, uid 0, gid 0"; return 1; }; }; if alt0; then echo compliant; fi

Очекивани излаз: compliant

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

- IF - cron is installed on the system: Run the following commands to set ownership and permissions on the /etc/cron.yearly directory: # chown root:root /etc/cron.yearly/ # chmod og-rwx /etc/cron.yearly/

Својства

Оперативни системи: rocky-8
Ознаке: cis-convertedlinux
Референца: CIS Rocky Linux 8 Benchmark v3.0.0 - 2.4.1.7

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target linux