Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22356 | GEN001730 | SV-38734r1_rule | ECLP-1 | Medium |
Description |
---|
Global initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon. |
STIG | Date |
---|---|
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2014-10-03 |
Check Text ( C-37159r1_chk ) |
---|
Check global initialization files for extended ACLs. Procedure: #aclget /etc/profile /etc/bashrc /etc/csh.login /etc/csh.cshrc /etc/environment /etc/.login /etc/security/environ /etc/security/.profile Check if extended permissions are disabled. If extended permissions are not disabled, this is a finding. |
Fix Text (F-32449r1_fix) |
---|
Remove the extended ACL from the global initialization file(s) and disable extended permissions. #acledit |