Detections
Analytics

1.156 SOL-11.1-070010

Information

The sticky bit must be set on all world writable directories.

GROUP ID: V-216417
RULE ID: SV-216417r959010

Files in directories that have had the "sticky bit" enabled can only be deleted by users that have both write permissions for the directory in which the file resides, as well as ownership of the file or directory, or have sufficient privileges. As this prevents users from overwriting each others' files, whether it be accidental or malicious, it is generally appropriate for most world-writable directories (e.g., /tmp).

Solution

The root role is required.

Ensure that the "sticky bit" is set on any directories identified during the check steps.

# chmod +t [directory name]

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216417r959010_rule, STIG-ID|SOL-11.1-070010, Vuln-ID|V-216417

Plugin: Unix

Control ID: ee29e8ee61ccab6ef013bd7119828de92d1cfe3b7c0bd0a1c24ef3a01277eba1