Propose removal of "Disable anacron Service"

Trevor Vaughan tvaughan at onyxpoint.com
Wed Apr 16 00:19:48 UTC 2014


So, I was re-reading the RHEL6 guide and I'm not seeing the imminent threat
on leaving anacron on a server.

1) I usually want anacron to take care of things that I missed if a server
has been down for a while.
2) Anacron can only be used by root. Regular users can't modify anacron
settings.
3) Cron is already locked down based on further guidance (which I don't see
a CCE for)

So, given 1-3, what is the practical harm in leaving anacron on the system?

Given the above, unless there is a solid attack vector behind this that I'm
missing, I would like to propose the deletion of "Disable anacron Service".

Thanks,

Trevor

-- 
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvaughan at onyxpoint.com

-- This account not approved for unencrypted proprietary information --
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140415/75b7ab5e/attachment.html>


More information about the scap-security-guide mailing list