SV-270824r1066961_rule
V-270824
SRG-OS-000258-GPOS-00099
UBTU-24-901260
CAT II
10
Configure the system commands directories to be protected from unauthorized access. Run the following command:
$ sudo find /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -perm /022 -type d -exec chmod -R 755 '{}' \;
Verify the system commands directories have mode "0755" or less permissive with the following command:
$ find /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -perm /022 -type d -exec stat -c "%n %a" '{}' \;
If any directories are found to be group-writable or world-writable, this is a finding.
V-270824
False
UBTU-24-901260
Verify the system commands directories have mode "0755" or less permissive with the following command:
$ find /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -perm /022 -type d -exec stat -c "%n %a" '{}' \;
If any directories are found to be group-writable or world-writable, this is a finding.
M
5673