SV-261306r996389_rule
V-261306
SRG-OS-000480-GPOS-00227
SLEM-05-232105
CAT II
10
Change the group of SLEM 5 world-writable directories to root with the following command:
> sudo chgrp root <directory>
Verify all SLEM 5 world-writable directories are group-owned by root, sys, bin, or an application group with the following command:
> sudo find / -perm -002 -type d -exec ls -lLd {} \;
drwxrwxrwt. 2 root root 40 Aug 26 13:7 /dev/mqueue
drwxrwxrwt. 2 root root 220 Aug 26 13:23 /dev/shm
drwxrwxrwt. 14 root root 4096 Aug 26 13:29 /tmp
If any world-writable directories are not owned by root, sys, bin, or an application group associated with the directory, this is a finding.
V-261306
False
SLEM-05-232105
Verify all SLEM 5 world-writable directories are group-owned by root, sys, bin, or an application group with the following command:
> sudo find / -perm -002 -type d -exec ls -lLd {} \;
drwxrwxrwt. 2 root root 40 Aug 26 13:7 /dev/mqueue
drwxrwxrwt. 2 root root 220 Aug 26 13:23 /dev/shm
drwxrwxrwt. 14 root root 4096 Aug 26 13:29 /tmp
If any world-writable directories are not owned by root, sys, bin, or an application group associated with the directory, this is a finding.
M
5596