Detections
Analytics

1.53 SOL-11.1-020310

Information

All run control scripts must have no extended ACLs.

GROUP ID: V-216065RULE ID: SV-216065r959010

If the startup files are writable by other users, these users could modify the startup files to insert malicious commands into the startup files.

Solution

Remove the extended ACL from the file.

chmod A- [run control script with extended ACL]

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-216065r959010_rule, STIG-ID|SOL-11.1-020310, Vuln-ID|V-216065

Plugin: Unix

Control ID: 3c2c1018d31dbdcfb46e82c34569967ff28b78b7fe0c2f5f5d414ffb1b8e32a5