TMA-AIX-4.6.2.3

Ensure ftpd umask is configured

VisokaNivo 1Automatskaaix

Opis

The umask of the ftpd service should be set to at least 027 in order to prevent the FTP daemon process from creating world-accessable, group-writeable files by default. The umask of the ftpd service should be set to at least 027 in order to prevent the FTP daemon process from creating world-accessable and group-writeable files by default. Audit: when ftp is enabled in inetd.conf, ftpd must run with -u 027 (or stricter 077).

Kako se proverava

Metod provere: Komanda ljuske

shell

l=$(grep "^ftp[[:blank:]]" /etc/inetd.conf 2>/dev/null); if [ -n "$l" ]; then printf '%s\n' "$l" | grep -Eq -- "-u[[:blank:]]*0?(027|077)" && echo compliant || echo "$l"; else echo compliant; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Set the default umask of the ftp daemon: [[ $(grep -c "^ftp[[:blank:]]" /etc/inetd.conf) -gt 0 ]] && chsubserver -c -v ftp -p tcp "ftpd -l -u 027" && refresh -s inetd || RC=0 NOTE: The umask above restricts write permissions for both group and other. All access for other is removed.

Svojstva

Operativni sistemi: Bilo koji
Oznake: aixaccounts
Referenca: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.2.3 Ensure ftpd umask is configured

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target aix