The Photon operating system must be configured so the "/etc/cron.allow" file is protected from unauthorized modification.
An XCCDF Rule
Description
<VulnDiscussion>If cron files and folders are accessible to unauthorized users, malicious jobs may be created.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-256564r887366_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
At the command line, run the following commands:
# chmod 600 /etc/cron.allow
# chown root:root /etc/cron.allow