Detections
Analytics

1.134 RHEL-10-400235

Information

RHEL 10 must enforce mode "0740" or less permissive for local initialization files.

GROUP ID: V-281064RULE ID: SV-281064r1165547

Local initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon login.

Solution

Configure RHEL 10 so that all local initialization files have a mode of "0740" or less permissive with the following command:

Note: The example will be for the "disauser" user, who has a home directory of "/home/disauser".

$ sudo chmod 0740 /home/disauser/.<INIT_FILE>

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-281064r1165547_rule, STIG-ID|RHEL-10-400235, Vuln-ID|V-281064

Plugin: Unix

Control ID: e4c55534811dc3ef36867d75ad34aee2f81c912bcc77fb220053128538b4e8e9