Detections
Analytics

GEN000960 - The root account must not have world-writable directories in its executable search path.

Information

If the root search path contains a world-writable directory, malicious software could be placed in the path by intruders and/or malicious users and inadvertently run by root with all of root's privileges.

Solution

For each world-writable path in root's executable search path, perform one of the following.

1. Remove the world-writable permission on the directory.
Procedure:
# chmod o-w <path>

2. Remove the world-writable directory from the executable search path.

Procedure:
Identify and edit the initialization file referencing the world-writable directory and remove it from the PATH variable.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220079r603266_rule, STIG-ID|GEN000960, STIG-Legacy|SV-37075, STIG-Legacy|V-777, Vuln-ID|V-220079

Plugin: Unix

Control ID: d4d3add478bcf0039a76718ffd028d2331fd5cefbe724771d802d8a4a21e4a7c