SV-282730r1201170_rule
V-282730
SRG-OS-000480-GPOS-00227
TOSS-05-000310
CAT II
10
Set the mode on files being executed by the local initialization files using the following command:
$ sudo chmod 0755 <file>
Verify local initialization files do not execute world-writable programs using the following command.
Note: The example will be for a system that is configured to create user home directories in the "/home" directory.
$ sudo find /home -perm -002 -type f -name ".[^.]*" -exec ls -ld {} \;
If any local initialization files are found to reference world-writable files, this is a finding.
V-282730
False
TOSS-05-000310
Verify local initialization files do not execute world-writable programs using the following command.
Note: The example will be for a system that is configured to create user home directories in the "/home" directory.
$ sudo find /home -perm -002 -type f -name ".[^.]*" -exec ls -ld {} \;
If any local initialization files are found to reference world-writable files, this is a finding.
M
5738