Detections
Analytics

1.62 SOL-11.1-020510

Information

All .Xauthority files must have mode 0600 or less permissive.

GROUP ID: V-216309
RULE ID: SV-216309r959010

.Xauthority files ensure the user is authorized to access the specific X Windows host. Excessive permissions may permit unauthorized modification of these files, which could lead to Denial of Service to authorized access or allow unauthorized access to be obtained.

Solution

Change the mode of the .Xauthority files.

Procedure:

# chmod 0600 .Xauthority

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6, 800-53|CM-6b., CAT|II, CCI|CCI-000225, CCI|CCI-000366, Rule-ID|SV-216309r959010_rule, STIG-ID|SOL-11.1-020510, Vuln-ID|V-216309

Plugin: Unix

Control ID: a64dc3999787317c9135c73b31669cdc246728d0eb37c38efcd6b85d52cbcfeb