0079-issue-priv - Ensure issue Permissions (-rw-r--r--)
Rule ID
Category
Level
Compatible Versions
Description
- The contents of the
/etc/issue file are displayed to users before logging in at the local terminal.
Scan Frequency
Rationale
- If the
/etc/issue file does not have proper ownership, unauthorized users may modify it with incorrect or misleading information.
Risk Items
- Hacker infiltration
- Data leakage
- Cryptojacking risk
- Botnet risk
Audit Method
- Run the following command and verify that the Uid and Gid are both 0/root, and Access is 644:
# stat /etc/issue
Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
- Run the following commands to set the permissions on
/etc/issue:
# chown root:root /etc/issue
# chmod u-x,go-wx /etc/issue
Impact
Default Value
References
CIS Controls
- Version 7
14.6 Protect Information through Access Control Lists
Protect all information stored on systems with file system, network share, claims, application, or database-specific access control lists. These controls enforce the principle that only authorized individuals should have access to the information that is necessary for them to perform their job duties.