Detections
Analytics

1.172 SOL-11.1-070190

Information

All valid SUID/SGID files must be documented.

GROUP ID: V-216198RULE ID: SV-216198r959010

There are valid reasons for SUID/SGID programs, but it is important to identify and review such programs to ensure they are legitimate.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

The root role is required.

Determine the existence of any set-UID programs that do not belong on the system, and work with the owners (or system administrator) to determine the best course of action in accordance with site policy.

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216198r959010_rule, STIG-ID|SOL-11.1-070190, Vuln-ID|V-216198

Plugin: Unix

Control ID: 17f91d0af079d8d3db2f424adda0f94b5cda20c5e6b94ba46b6c6910cf6906a1