The Xylok Security Suite configuration file must be protected.

Severity
Group ID
Group Title
Version
Rule ID
Date
STIG Version
mediumV-269582SRG-APP-000380XYLK-20-000161SV-269582r1053521_rule2025-12-041

Description

Protecting the configuration file is a fundamental aspect of maintaining the security, integrity, and stability of Xylok Security Suite. By implementing robust protection mechanisms, Xylok can safeguard sensitive information, ensure compliance, and enhance operational reliability while minimizing the risks associated with unauthorized access and misconfigurations.

ℹ️ Check

Check the Xylok configuration file permissions with the following command: $ ls -l /etc/xylok.conf If this file has permissions greater than "0644", this is a finding.

✔️ Fix

As root, correct permissions for xylok.conf by running: # chmod 0644 /etc/xylok.conf