Detections
Analytics

1.111 OL08-00-010660

Information

Local OL 8 initialization files must not execute world-writable programs.

GROUP ID: V-248627RULE ID: SV-248627r991589

If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Set the mode on files being executed by the local initialization files with the following command:

$ sudo chmod 0755 <file>

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248627r991589_rule, STIG-ID|OL08-00-010660, Vuln-ID|V-248627

Plugin: Unix

Control ID: aaf7df09ebe8759c5cf6d4593cad0e2f71fd4e499e5997061cec562224c4442a