Ensure access to /etc/crontab is configured

SrednjaNivo 1Automatskalinux

Opis

The /etc/crontab file is used by cron to control its own jobs. The commands in this item make sure that root is the user and group owner of the file and that only the owner can access the file.

Kako se proverava

Metod provere: Komanda ljuske

shell

alt0() { s=$(stat -Lc '%a %u %g' /etc/crontab 2>&1) || { echo "step1: $s"; return 1; }; set -- $s; m=$((8#$1)); [ $((m & ~0600)) -eq 0 ] && [ "$2" = 0 ] && [ "$3" = 0 ] || { echo "step1: /etc/crontab is mode $1 uid $2 gid $3, want 600 or stricter, uid 0, gid 0"; return 1; }; }; if alt0; then echo compliant; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

- IF - cron is installed on the system: Run the following commands to set ownership and permissions on /etc/crontab: # chown root:root /etc/crontab # chmod og-rwx /etc/crontab

Svojstva

Operativni sistemi: rocky-8
Oznake: cis-convertedlinux
Referenca: CIS Rocky Linux 8 Benchmark v3.0.0 - 2.4.1.2

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target linux