Detections
Analytics

1.174 SOL-11.1-070190

Information

All valid SUID/SGID files must be documented.

GROUP ID: V-216435
RULE ID: SV-216435r959010

There are valid reasons for SUID/SGID programs, but it is important to identify and review such programs to ensure they are legitimate.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

The root role is required.

Determine the existence of any set-UID programs that do not belong on the system, and work with the owners (or system administrator) to determine the best course of action in accordance with site policy.

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216435r959010_rule, STIG-ID|SOL-11.1-070190, Vuln-ID|V-216435

Plugin: Unix

Control ID: 8684e64cc2ccc4cd7720ef57e452c39eb36aa310b9c97b5f73fa89a2aa5c0d96