Detections
Analytics

1.63 SOL-11.1-020520

Information

The .Xauthority files must not have extended ACLs.

GROUP ID: V-216075RULE ID: SV-216075r959010

.Xauthority files ensure the user is authorized to access the specific X Windows host. Extended ACLs may permit unauthorized modification of these files, which could lead to Denial of Service to authorized access or allow unauthorized access to be obtained.

Solution

Remove the extended ACL from the file.

chmod A- .Xauthority

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-6, 800-53|CM-6b., CAT|II, CCI|CCI-000225, CCI|CCI-000366, Rule-ID|SV-216075r959010_rule, STIG-ID|SOL-11.1-020520, Vuln-ID|V-216075

Plugin: Unix

Control ID: d22474a18142b465b531fde92718b624b0537e7bc0a78dea7167fb099412d6e3