SV-261287r1184377_rule
V-261287
SRG-OS-000259-GPOS-00100
SLEM-05-232010
CAT II
10
Configure the system command directories to be protected from unauthorized access.
Run the following command, replacing "[DIRECTORY]" with any library directory with a mode more permissive than 755:
> sudo chmod 755 [DIRECTORY]
Verify the system command directories have mode "755" or less permissive with the following command:
> find -L /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -type d -exec stat -c "%n %a" '{}' \;
If any directories are found to be group-writable or world-writable, this is a finding.
V-261287
False
SLEM-05-232010
Verify the system command directories have mode "755" or less permissive with the following command:
> find -L /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -type d -exec stat -c "%n %a" '{}' \;
If any directories are found to be group-writable or world-writable, this is a finding.
M
5596