Detections
Analytics
GEN002210 - All shell files must be group-owned by root, bin, sys, or system.
Information
If shell files are group-owned by users other than root or a system group, they could be modified by intruders or malicious users to perform unauthorized actions.Solution
Change the group owner of the shell to root, bin, sys, or system.# chgrp system < shell >
See Also
https://iasecontent.disa.mil/stigs/zip/U_AIX_6-1_V1R14_STIG.zip
Item Details
Audit Name: DISA STIG AIX 6.1 v1r14
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22365, Rule-ID|SV-38848r1_rule, STIG-ID|GEN002210, Vuln-ID|V-22365
Plugin: Unix
Control ID: a196858dced87ce8b4260b6fc1d301d4278594b5d7c45ed33adce84fb2895ba8