Detections
Analytics
GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.bash_profile'
Information
Local initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon.Solution
Change the group owner of the local initialization file to the user's primary group, or root.# chgrp [USER's primary GID] ~USER/[local initialization file]
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6, CAT|II, CCI|CCI-000225, CSCv6|3.1, Rule-ID|SV-26481r1_rule, STIG-ID|GEN001870, Vuln-ID|V-22361
Plugin: Unix
Control ID: 45788f300feb7aa98f4fa1042ccfb1d4262c6852da76f5ceccd2ceacf5e60305