Detections
Analytics
RHEL-10-400235 - RHEL 10 must enforce mode "0740" or less permissive for local initialization files.
Information
Local initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon login.Solution
Configure RHEL 10 so that all local initialization files have a mode of "0740" or less permissive with the following command:Note: The example will be for the "disauser" user, who has a home directory of "/home/disauser".
$ sudo chmod 0740 /home/disauser/.<INIT_FILE>
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R3_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r3
Category: ACCESS CONTROL
References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-281064r1268226_rule, STIG-ID|RHEL-10-400235, Vuln-ID|V-281064
Plugin: Unix
Control ID: 124cc825c6846e63396caca3f98dfb80531c07c9c9d39d8a94368192d51c54e1