Ensure access to /var/spool/clientmqueue is configured

OrtaDüzey 1Otomatikaix

Açıklama

The recommended DAC (discretionary access control) settings for the /var/spool/clientmqueue directory are applied. Queued messages are the messages that have not yet reached their final destination. To ensure the integrity of the messages during storage, the mail queue directory must be secured from unauthorized access. Audit: compares `ls -ld` mode (this mode or more restrictive), owner and group with the CIS values; ACLs are not evaluated.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

r=compliant; for f in /var/spool/clientmqueue/; do if [ -e "$f" ]; then set -- $(ls -ld "$f"); s=$(printf '%s %s %s\n' "$1" "$3" "$4" | awk -v m='rwxrwx---' -v o='smmsp' -v g='smmsp' '{ok=1; for(i=1;i<=9;i++) if(substr(m,i,1)=="-" && substr($1,i+1,1)!="-") ok=0; if(o!="" && $2 !~ ("^(" o ")$")) ok=0; if(g!="" && $3 !~ ("^(" g ")$")) ok=0; print (ok ? "ok" : $0)}'); [ "$s" = ok ] || r="$f: $s"; else r="$f: missing"; fi; done; echo "$r"

Beklenen çıktı: compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Set the recommended permissions and ownership on /var/spool/mqueue: chmod ug=rwx,o= /var/spool/clientmqueue chown smmsp.smmsp /var/spool/clientmqueue

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: aixpermissions
Referans: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.4.4 Ensure access to /var/spool/clientmqueue is configured

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target aix