Detections
Analytics

AIX7-00-003016 - The AIX ldd command must be disabled.

Information

The ldd command provides a list of dependent libraries needed by a given binary, which is useful for troubleshooting software. Instead of parsing the binary file, some ldd implementations invoke the program with a special environment variable set, which causes the system dynamic linker to display the list of libraries. Specially crafted binaries can specify an alternate dynamic linker which may cause a program to be executed instead of examined. If the program is from an untrusted source, such as in a user home directory, or a file suspected of involvement in a system compromise, unauthorized software may be executed with the rights of the user running ldd.

Solution

Disable the "ldd" command by removing its permissions using command:
# chmod 0000 <path to ldd>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_IBM_AIX_7-x_V3R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215329r991589_rule, STIG-ID|AIX7-00-003016, STIG-Legacy|SV-101717, STIG-Legacy|V-91619, Vuln-ID|V-215329

Plugin: Unix

Control ID: 37703392bf1698ad2dff9a1e69f57c1307e751e2f9f5b5399186a6827889cb84