Detections
Analytics

1.158 SOL-11.1-070030

Information

Permissions on user . (hidden) files must be 750 or less permissive.

GROUP ID: V-216419
RULE ID: SV-216419r959010

Group-writable or world-writable user configuration files may enable malicious users to steal or modify other users' data or to gain another user's system privileges.

Solution

The root role is required.

Change the permissions on users' "." files to 750 or less permissive.

# chmod 750 [file name]

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216419r959010_rule, STIG-ID|SOL-11.1-070030, Vuln-ID|V-216419

Plugin: Unix

Control ID: 18ae705c648cfbdfdaba0871f1ba5212f17d9a40c559cd61f9134a548cae3413