Detections
Analytics

1.173 ALMA-09-022130

Information

All AlmaLinux OS 9 local initialization files must have mode 0740 or less permissive.

GROUP ID: V-269276
RULE ID: SV-269276r1050158

Local initialization files are used to configure the user's shell environment upon logon. Malicious modification of these files could compromise accounts upon logon.

World-readable "dot files" such as .bash_history or .netrc can reveal plaintext credentials, such files should be further protected (e.g., 0600).

Solution

Set the mode of the local initialization files to "0740" with the following command:

Note: The example will be for the "testuser" account, who has a home directory of "/home/testuser".

$ chmod 0740 /home/testuser/.<INIT_FILE>

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269276r1050158_rule, STIG-ID|ALMA-09-022130, Vuln-ID|V-269276

Plugin: Unix

Control ID: 77f9989d910342a2f06cc85d16e47855df03be2fd151d7173e1d10a7fe1b7f49