AIX7-00-001040 - The AIX root accounts home directory must not have an extended ACL.

Information

Excessive permissions on root home directories allow unauthorized access to root user files.

Solution

Remove the extended ACL from the "root" account's home directory using command:
# acledit ~root

Change extended attributes to disabled.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R2_STIG.zip

Item Details

Audit Name: DISA IBM AIX 7.x STIG v3r2

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215199r991592_rule, STIG-ID|AIX7-00-001040, STIG-Legacy|SV-101863, STIG-Legacy|V-91765, Vuln-ID|V-215199

Plugin: Unix

Control ID: af7ada1a25393cc382142497725f78846e8fa62f254d6c89ea729e126deccb11