Detections
Analytics

1.170 SLES-15-040040

Information

The SUSE operating system file integrity tool must be configured to verify Access Control Lists (ACLs).

GROUP ID: V-234986RULE ID: SV-234986r991589

ACLs can provide permissions beyond those permitted through the file mode and must be verified by file integrity tools.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the SUSE operating system file integrity tool to check file and directory ACLs.

If AIDE is installed, ensure the "acl" rule is present on all file and directory selection lists.

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-234986r991589_rule, STIG-ID|SLES-15-040040, Vuln-ID|V-234986

Plugin: Unix

Control ID: 2d9797b71f5df254e1a4f3100a4fedb0c23969c9ee82f436bbc4063061ff143e