Detections
Analytics
GEN002540 - All public directories must be group-owned by system or an application group.
Information
If a public directory has the sticky bit set and is not group-owned by a system GID, unauthorized users may be able to modify files created by others. The only authorized public directories are those temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage (e.g., /tmp) and for directories requiring global read/write access.Solution
Change the group ownership of the public directory.Procedure:
# chgrp system /tmp
(Replace system with a different system group and/or /tmp with a different public directory as necessary.)
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Rule-ID|SV-40066r1_rule, STIG-ID|GEN002540, Vuln-ID|V-11990
Plugin: Unix
Control ID: 91031697d470c35f3015f494a786547a3446473303e97564a0121bf2ae480b92