Detections
Analytics

GEN001870 - Local initialization files must be group-owned by the user's primary group or root.

Information

Local initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon.

Solution

Change the group-owner of the local initialization file to the user's primary group, or root.
# chgrp [USER's primary GID] ~USER/[local initialization file]

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220088r603266_rule, STIG-ID|GEN001870, STIG-Legacy|SV-37101, STIG-Legacy|V-22361, Vuln-ID|V-220088

Plugin: Unix

Control ID: 573b9b64cf1d108cc3926ea4a2c2cbf2527b268cc58817d5d1c935b0722de95f