Detections
Analytics

1.53 SOL-11.1-020310

Information

All run control scripts must have no extended ACLs.

GROUP ID: V-216300
RULE ID: SV-216300r959010

If the startup files are writable by other users, these users could modify the startup files to insert malicious commands into the startup files.

Solution

Remove the extended ACL from the file.

# chmod A- [run control script with extended ACL]

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216300r959010_rule, STIG-ID|SOL-11.1-020310, Vuln-ID|V-216300

Plugin: Unix

Control ID: 727fc06926ae5144ece5d714fa762c692d93eae030583898e3c2034e99a07b7c