GEN000920 - The root account's home directory (other than /) must have mode 0700.

Information

Permissions greater than 0700 could allow unauthorized users access to the root home directory.

Solution

The root home directory will have permissions of 0700. Do not change the protections of the / directory. Use the following command to change protections for the root home directory.
# chmod 0700 /rootdir.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R2_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(8), CAT|II, CCI|CCI-002233, Rule-ID|SV-226472r603265_rule, STIG-ID|GEN000920, STIG-Legacy|SV-775, STIG-Legacy|V-775, Vuln-ID|V-226472

Plugin: Unix

Control ID: 04099b4653607da41a48747308c7e5bdb1d2e61136a03087f02f6fd89f8c6ddd