Ensure that /etc/at.deny does not exist
An XCCDF Rule
Description
The file /etc/at.deny should not exist.
Use /etc/at.allow instead.
Rationale
Access to at should be restricted.
It is easier to manage an allow list than a deny list.
- ID
- xccdf_org.ssgproject.content_rule_file_at_deny_not_exist
- Severity
- Medium
- References
- Updated
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- CCE-91313-7
- PCI-DSSv4-2.2
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel-default; then
if [[ -f /etc/at.deny ]]; then
rm /etc/at.deny
fi