Detections
Analytics

1.287 RHEL-09-411115

Information

Local RHEL 9 initialization files must not execute world-writable programs.

GROUP ID: V-258062
RULE ID: SV-258062r991589

If user start-up files execute world-writable programs, especially in unprotected directories, they could be maliciously modified to destroy user files or otherwise compromise the system at the user level. If the system is compromised at the user level, it is easier to elevate privileges to eventually compromise the system at the root and network level.

Solution

Set the mode on files being executed by the local initialization files with the following command:

$ sudo chmod 0755 <file>

See Also

https://workbench.cisecurity.org/benchmarks/22008

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258062r991589_rule, STIG-ID|RHEL-09-411115, Vuln-ID|V-258062

Plugin: Unix

Control ID: c799e33f6462f95a6e0cf148d8b74189bc346b9f60c004b075bd53bd3f8285bb