The Xylok Security Suite configuration file must be protected.

Severity
Group ID
Group Title
Version
Rule ID
Date
STIG Version
mediumV-269582SRG-APP-000380XYLK-20-000161SV-269582r1053521_rule2024-12-131
Description
Protecting the configuration file is a fundamental aspect of maintaining the security, integrity, and stability of Xylok Security Suite. By implementing robust protection mechanisms, Xylok can safeguard sensitive information, ensure compliance, and enhance operational reliability while minimizing the risks associated with unauthorized access and misconfigurations.
ℹ️ Check
Check the Xylok configuration file permissions with the following command: $ ls -l /etc/xylok.conf If this file has permissions greater than "0644", this is a finding.
✔️ Fix
As root, correct permissions for xylok.conf by running: # chmod 0644 /etc/xylok.conf