SV-12487r4_rule
V-11986
GEN001900
GEN001900
CAT II
10
Edit the local initialization file(s) and remove the relative path entry from the PATH variable.
NOTE: The following must be done in the BASH shell.
Examine the PATH variable contained in any user's local initialization files to ensure the use of only absolute paths, using a command shell that supports the use of ~USER as USER's home directory.
# cat /etc/passwd | cut -f 1,1 -d ":" | xargs -n1 -IUSER sh -c 'grep -i PATH ~USER/.*'
The PATH variable is a colon-delimited directory list.
If there is an empty entry, such as a leading or trailing colon, or two consecutive colons, this is a finding.
If an entry begins with a character other than a slash (/) or other than "$PATH", it is a relative path and this is a finding.
V-11986
False
GEN001900
NOTE: The following must be done in the BASH shell.
Examine the PATH variable contained in any user's local initialization files to ensure the use of only absolute paths, using a command shell that supports the use of ~USER as USER's home directory.
# cat /etc/passwd | cut -f 1,1 -d ":" | xargs -n1 -IUSER sh -c 'grep -i PATH ~USER/.*'
The PATH variable is a colon-delimited directory list.
If there is an empty entry, such as a leading or trailing colon, or two consecutive colons, this is a finding.
If an entry begins with a character other than a slash (/) or other than "$PATH", it is a relative path and this is a finding.
M
System Administrator
1386