SV-275579r1147787_rule
V-275579
SRG-OS-000258-GPOS-00099
RIIM-OS-232010
CAT II
10
Configure Ubuntu OS commands directories to be protected from unauthorized access. Run the following command:
$ sudo find /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -perm /022 -type d -exec chmod -R 755 '{}' \;
Verify the system commands directories have mode "755" or less permissive by using the following command:
$ find /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -perm /022 -type d -exec stat -c "%n %a" '{}' \;
If any directories are found to be group-writable or world-writable, this is a finding.
V-275579
False
RIIM-OS-232010
Verify the system commands directories have mode "755" or less permissive by using the following command:
$ find /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin -perm /022 -type d -exec stat -c "%n %a" '{}' \;
If any directories are found to be group-writable or world-writable, this is a finding.
M
5706