GEN001870 - Local initialization files must be group-owned by the user's primary group or root - '~/.cshrc'

Information

Local initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon.

Solution

Change the group owner of the local initialization file to the user's primary group, or root.
# chgrp [USER's primary GID] ~USER/[local initialization file]

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Rule-ID|SV-26481r1_rule, STIG-ID|GEN001870, Vuln-ID|V-22361

Plugin: Unix

Control ID: 45788f300feb7aa98f4fa1042ccfb1d4262c6852da76f5ceccd2ceacf5e60305