Detections
Analytics

1.63 SOL-11.1-020520

Information

The .Xauthority files must not have extended ACLs.

GROUP ID: V-216310
RULE ID: SV-216310r959010

.Xauthority files ensure the user is authorized to access the specific X Windows host. Extended ACLs may permit unauthorized modification of these files, which could lead to Denial of Service to authorized access or allow unauthorized access to be obtained.

Solution

Remove the extended ACL from the file.

# chmod A- .Xauthority

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6, 800-53|CM-6b., CAT|II, CCI|CCI-000225, CCI|CCI-000366, Rule-ID|SV-216310r959010_rule, STIG-ID|SOL-11.1-020520, Vuln-ID|V-216310

Plugin: Unix

Control ID: 0d0bacd09c31b2652f20284330c2c6f737d0c35b1bbe4fe2f6988c0762738835