Detections
Analytics
OL07-00-020710 - The Oracle Linux operating system must be configured so that all local initialization files have mode 0740 or less permissive.
Information
Local initialization files are used to configure the user's shell environment upon logon. Malicious modification of these files could compromise accounts upon logon.Solution
Set the mode of the local initialization files to '0740' with the following command:Note: The example will be for the 'smithj' user, who has a home directory of '/home/smithj'.
# chmod 0740 /home/smithj/.[^.]*
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_7_V3R5_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 7 STIG v3r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-221737r991589_rule, STIG-ID|OL07-00-020710, STIG-Legacy|SV-108317, STIG-Legacy|V-99213, Vuln-ID|V-221737
Plugin: Unix
Control ID: 3a5a193aa78a836ca52bb5abc11d0b89d5a93e095317fa6c867575e985ee0b72