STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must prohibit local initialization files from executing world-writable programs.

DISA Rule

SV-281095r1184678_rule

Vulnerability Number

V-281095

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

RHEL-10-400500

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Configure RHEL 10 so that local initialization files do not execute world-writable programs with the following command:

$ sudo chmod 0755 <file>

Check Contents

Verify RHEL 10 local initialization files do not execute world-writable programs with the following command:

Note: The example will be for a system that is configured to create user home directories in the "/home" directory.

$ sudo find /home -perm -002 -type f -name ".[^.]*" -exec ls -ld {} \;

If any local initialization files are found to reference world-writable files, this is a finding.

Vulnerability Number

V-281095

Documentable

False

Rule Version

RHEL-10-400500

Severity Override Guidance

Verify RHEL 10 local initialization files do not execute world-writable programs with the following command:

Note: The example will be for a system that is configured to create user home directories in the "/home" directory.

$ sudo find /home -perm -002 -type f -name ".[^.]*" -exec ls -ld {} \;

If any local initialization files are found to reference world-writable files, this is a finding.

Check Content Reference

M

Target Key

5733