STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must ensure a sticky bit be set on all public directories.

DISA Rule

SV-274164r1137695_rule

Vulnerability Number

V-274164

Group Title

SRG-OS-000138-GPOS-00069

Rule Version

AZLX-23-002500

Severity

CAT II

CCI(s)

• CCI-001090 - Prevent unauthorized and unintended information transfer via shared system resources.

Weight

10

Fix Recommendation

Configure Amazon Linux 2023 world-writable directories to have the sticky bit set to prevent unauthorized and unintended information transferred via shared system resources.

Set the sticky bit on all world-writable directories using the following command:

$ sudo find / -type d -perm -0002 ! -perm -1000 -exec chmod +t {} +

Check Contents

Verify Amazon Linux 2023 world-writable directories have the sticky bit set.

Determine if all world-writable directories have the sticky bit set by running the following command:

$ sudo find / -type d -perm -0002 ! -perm -1000 -exec ls -ld {} +

If any output is returned, these directories are world-writable and do not have the sticky bit set, and this is a finding.

Vulnerability Number

V-274164

Documentable

False

Rule Version

AZLX-23-002500

Severity Override Guidance

Verify Amazon Linux 2023 world-writable directories have the sticky bit set.

Determine if all world-writable directories have the sticky bit set by running the following command:

$ sudo find / -type d -perm -0002 ! -perm -1000 -exec ls -ld {} +

If any output is returned, these directories are world-writable and do not have the sticky bit set, and this is a finding.

Check Content Reference

M

Target Key

5700