STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

The sticky bit must be set on all SLEM 5 world-writable directories.

DISA Rule

SV-261307r1137695_rule

Vulnerability Number

V-261307

Group Title

SRG-OS-000138-GPOS-00069

Rule Version

SLEM-05-232110

Severity

CAT II

CCI(s)

CCI-001090 - Prevent unauthorized and unintended information transfer via shared system resources.

Weight

Fix Recommendation

Configure SLEM 5 shared system resources to prevent any unauthorized and unintended information transfer by setting the sticky bit for all world-writable directories.

An example of a world-writable directory is "/tmp" directory. Set the sticky bit on all of the world-writable directories (using the "/tmp" directory as an example) with the following command:

> sudo chmod 1777 /tmp

For every world-writable directory, replace "/tmp" in the command above with the world-writable directory that does not have the sticky bit set.

Check Contents

Verify SLEM 5 prevents unauthorized and unintended information transfer via the shared system resources with the following command:

> sudo find / \( -path /.snapshots -o -path /sys -o -path /proc \) -prune -o -perm -002 -type d -exec ls -lLd {} \;
256 0 drwxrwxrwt 1 root root 4096 Jun 14 06:45 /tmp

If any of the returned directories do not have the sticky bit set, or are not documented as having the write permission for the other class, this is a finding.

Vulnerability Number

V-261307

Documentable

False

Rule Version

SLEM-05-232110

Severity Override Guidance

Check Content Reference

Target Key

5596