Detections
Analytics

SOL-11.1-070190 - All valid SUID/SGID files must be documented.

Information

There are valid reasons for SUID/SGID programs, but it is important to identify and review such programs to ensure they are legitimate.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

The root role is required.

Determine the existence of any set-UID programs that do not belong on the system, and work with the owners (or system administrator) to determine the best course of action in accordance with site policy.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_11_SPARC_V3R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-216435r959010_rule, STIG-ID|SOL-11.1-070190, STIG-Legacy|SV-60931, STIG-Legacy|V-48059, Vuln-ID|V-216435

Plugin: Unix

Control ID: 3778704419be1a9462f5cdd8cb47a62164dfb837e652e141abdd243fe2ea7f21