Device files used for backup must only be readable and/or writable by root or the backup user.

From HP-UX 11.31 Security Technical Implementation Guide

Part of GEN002300

Associated with IA controls: ECCD-2, ECCD-1

Associated with: CCI-000225

SV-38506r1_rule Device files used for backup must only be readable and/or writable by root or the backup user.

Vulnerability discussion

System backups could be accidentally or maliciously overwritten and destroy the ability to recover the system if a compromise should occur. Unauthorized users could also copy system files.

Check content

Check the system for device files read/write enabled for users other than root or the backup user. Example: # find / \( -perm -0020 -o -perm -0040 -o -perm -0002 -o -perm -0004 \) -a \( -type b -o -type c -o -type n \) -exec ls -ld {} \; If any device files used for backup are read/write enabled for users other than root, this is a finding.

Fix text

Use the chmod command to remove the read/write bit(s) from the backup device files. # chmod o-r # chmod o-w # chmod g-r # chmod g-w Document all changes.