STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must enforce mode "755" or less permissive for library files.

DISA Rule

SV-281060r1165535_rule

Vulnerability Number

V-281060

Group Title

SRG-OS-000259-GPOS-00100

Rule Version

RHEL-10-400215

Severity

CAT II

CCI(s)

• CCI-001499 - Limit privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

Configure RHEL 10 so that the library files are protected from unauthorized access. Run the following command, replacing "[FILE]" with any library file with a mode more permissive than "755".

$ sudo chmod 755 [FILE]

Check Contents

Verify RHEL 10 is configured so that the systemwide shared library files contained in the following directories have mode "755" or less permissive with the following command:

$ sudo find -L /lib /lib64 /usr/lib /usr/lib64 -perm /022 -type f -exec ls -l {} \;

If any systemwide shared library file is found to be group-writable or world-writable, this is a finding.

Vulnerability Number

V-281060

Documentable

False

Rule Version

RHEL-10-400215

Severity Override Guidance

Verify RHEL 10 is configured so that the systemwide shared library files contained in the following directories have mode "755" or less permissive with the following command:

$ sudo find -L /lib /lib64 /usr/lib /usr/lib64 -perm /022 -type f -exec ls -l {} \;

If any systemwide shared library file is found to be group-writable or world-writable, this is a finding.

Check Content Reference

M

Target Key

5733