Access to the at utility must be controlled via the at.allow and/or at.deny file(s).

From AIX 5.3 Security Technical Implementation Guide

Associated with IA controls: ECLP-1

Associated with: CCI-000225

SV-27377r1_rule Access to the at utility must be controlled via the at.allow and/or at.deny file(s).

Vulnerability discussion

The at facility selectively allows users to execute jobs at deferred times. It is usually used for one-time jobs. The at.allow file selectively allows access to the at facility. If there is no at.allow file, there is no ready documentation of who is allowed to submit at jobs.

Check content

Fix text

Create at.allow and/or at.deny files containing appropriate lists of users to be allowed or denied access to the "at" daemon.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.