Detections
Analytics

1.347 OL09-00-002521

Information

OL 9 library directories must be owned by root.

GROUP ID: V-271787
RULE ID: SV-271787r1092073

If OL 9 allowed any user to make changes to software libraries, then those changes might be implemented without undergoing the appropriate testing and approvals that are part of a robust change management process.

This requirement applies to OL 9 with software libraries that are accessible and configurable, as in the case of interpreted languages. Software libraries also include privileged programs that execute with escalated privileges.

Solution

Configure the system-wide shared library directories within (/lib, /lib64, /usr/lib and /usr/lib64) to be protected from unauthorized access.

Run the following command, replacing "[DIRECTORY]" with any library directory not owned by "root".

$ sudo chown root [DIRECTORY]

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-5(6), CCI|CCI-001499, Rule-ID|SV-271787r1092073_rule, STIG-ID|OL09-00-002521, Vuln-ID|V-271787

Plugin: Unix

Control ID: 6a6ff1bd896da8bf38076ad55d42969a19963895cf8c89b58afa5b1b6082b442