GEN002220 - All shell files must have mode 0755 or less permissive.

Information

Shells with world/group write permissions give the ability to maliciously modify the shell to obtain unauthorized access.

Solution

Change the mode of the shell.
# chmod 0755 < shell >

See Also

https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip

Item Details

Audit Name: DISA STIG AIX 6.1 v1r14

Category: ACCESS CONTROL

References: 800-53|AC-6, CAT|I, CCI|CCI-000225, Group-ID|V-922, Rule-ID|SV-38846r1_rule, STIG-ID|GEN002220, Vuln-ID|V-922

Plugin: Unix

Control ID: 0340440d8e7fb74f0893be53bc657ab7c1c8522e0acfeecc8e8bbc2b05d43d59