STIGQter STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX run control scripts executable search paths must contain only absolute paths.

DISA Rule

SV-215345r508663_rule

Vulnerability Number

V-215345

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

AIX7-00-003039

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Edit the run control script and remove the relative path entry from the executable search path variable.

Check Contents

Verify run control scripts' library search paths by running:

# grep -r PATH /etc/rc*
/etc/rc:PATH=/usr/sbin:/usr/bin:/usr/ucb:/etc
/etc/rc:export PATH ODMDIR
/etc/rc.C2:export PATH=/usr/bin:/etc:/usr/sbin:/sbin:/usr/ucb
/etc/rc.CC:export PATH=/usr/bin:/etc:/usr/sbin:/sbin:/usr/ucb
/etc/rc.bsdnet:export PATH=/usr/bin:/usr/sbin:$PATH

This variable is formatted as a colon-separated list of directories.

If there is an empty entry, such as a leading or trailing colon, or two consecutive colons, this is a finding.

If an entry begins with a character other than a slash (/) or other than "$PATH", it is a relative path, this is a finding.

Vulnerability Number

V-215345

Documentable

False

Rule Version

AIX7-00-003039

Severity Override Guidance

Verify run control scripts' library search paths by running:

# grep -r PATH /etc/rc*
/etc/rc:PATH=/usr/sbin:/usr/bin:/usr/ucb:/etc
/etc/rc:export PATH ODMDIR
/etc/rc.C2:export PATH=/usr/bin:/etc:/usr/sbin:/sbin:/usr/ucb
/etc/rc.CC:export PATH=/usr/bin:/etc:/usr/sbin:/sbin:/usr/ucb
/etc/rc.bsdnet:export PATH=/usr/bin:/usr/sbin:$PATH

This variable is formatted as a colon-separated list of directories.

If there is an empty entry, such as a leading or trailing colon, or two consecutive colons, this is a finding.

If an entry begins with a character other than a slash (/) or other than "$PATH", it is a relative path, this is a finding.

Check Content Reference

M

Target Key

4012

Comments