SV-261353r1184417_rule
V-261353
SRG-OS-000480-GPOS-00227
SLEM-05-411035
CAT II
10
Edit SLEM 5 local interactive user initialization files to change any PATH variable statements for executables that reference directories other than their home directory. If a local interactive user requires path variables to reference a directory owned by the application, it must be documented with the ISSO.
Verify that all SLEM 5 local interactive user initialization files executable search path statements do not contain statements that will reference a working directory other than the user's home directory with the following command:
Note: The example will be for the user "dosuser", who has a home directory of "/home/dosuser".
> sudo grep -i path= /home/dosuser/.*
/home/dosuser/.bash_profile:PATH=$PATH:$HOME/.local/bin:$HOME/bin
If any local interactive user initialization files have executable search path statements that include directories outside of their home directory, and the additional path statements are not documented with the ISSO as an operational requirement, this is a finding.
V-261353
False
SLEM-05-411035
Verify that all SLEM 5 local interactive user initialization files executable search path statements do not contain statements that will reference a working directory other than the user's home directory with the following command:
Note: The example will be for the user "dosuser", who has a home directory of "/home/dosuser".
> sudo grep -i path= /home/dosuser/.*
/home/dosuser/.bash_profile:PATH=$PATH:$HOME/.local/bin:$HOME/bin
If any local interactive user initialization files have executable search path statements that include directories outside of their home directory, and the additional path statements are not documented with the ISSO as an operational requirement, this is a finding.
M
5596