Detections
Analytics
GEN000960 - The root account must not have world-writable directories in its executable search path.
Information
If the root search path contains a world-writable directory, malicious software could be placed in the path by intruders and/or malicious users and inadvertently run by root with all of root's privileges.Solution
For each world-writable path in root's executable search path, perform one of the following.1. Remove the world-writable permission on the directory.
Procedure:
# chmod o-w <path>
2. Remove the world-writable directory from the executable search path.
Procedure:
Identify and edit the initialization file referencing the world-writable directory and remove it from the PATH variable.
See Also
http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip
Item Details
Audit Name: DISA AIX 5.3 STIG v1r2
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000366, Rule-ID|SV-777r2_rule, STIG-ID|GEN000960, Vuln-ID|V-777
Plugin: Unix
Control ID: 6bdf9002de984e102e1d31f774926f443e389c82401cf5bf768d6087004f7c3d