Detections
Analytics
GEN001570 - All files and directories contained in user home directories must not have extended ACLs.
Information
Excessive permissions allow unauthorized access to user files.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Remove the extended ACL from the file.# setfacl --remove-all <user file with extended ACL>
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: ACCESS CONTROL
References: 800-53|AC-6, CAT|II, CCI|CCI-000225, Group-ID|V-22352, Rule-ID|SV-37188r1_rule, STIG-ID|GEN001570, Vuln-ID|V-22352
Plugin: Unix
Control ID: 38907260df433d8438d92b628f52654c90e1f9536cb5f51c769bcac664e14712