0080-issue.net-priv-issue.net Not 644
Rule ID
Category
Level
Compatible Versions
Description
- The content of the
/etc/issue.net file is displayed to users prior to logging in via a remote connection from a configured service.
Scan Frequency
Rationale
- If the
/etc/issue.net file does not have the correct ownership, unauthorized users may modify it with incorrect or misleading information.
Risk Items
- Hacker infiltration
- Data leakage
- Cryptomining risk
- Botnet risk
Audit Method
- Run the following command and verify that Uid and Gid are both 0/root and Access is 644:
# stat /etc/issue.net
Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root)
- Run the following commands to set the permissions on
/etc/issue.net:
# chown root:root /etc/issue.net
# chmod u-x,go-wx /etc/issue.net
Impact
Default Value
References
CIS Controls
- Version 7
14.6 Protect Information through Access Control Lists
Protect all information stored on systems with file system, network share, claims, application, or database-specific access control lists. These controls will enforce the principle that only authorized individuals should have access to information that is part of their responsibilities.