Verify Permissions On /etc/ipsec.conf File
An XCCDF Rule
Description
To properly set the permissions of /etc/ipsec.conf
, run the command:
$ sudo chmod 0644 /etc/ipsec.conf
Rationale
Setting correct permissions on the /etc/ipsec.conf file is important because this file hosts Libreswan configuration. Protection of this file is critical for system security. Restricting the permissions ensures exclusive control of the Libreswan configuration.
- ID
- xccdf_org.ssgproject.content_rule_file_permissions_etc_ipsec_conf
- Severity
- Medium
- References
- Updated