All files and directories contained in user home directories must not have extended ACLs.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22352	GEN001570	SV-38731r1_rule	ECLP-1	Medium

Description
Excessive permissions allow unauthorized access to user files.

STIG	Date
Draft AIX Security Technical Implementation Guide	2011-08-17

Details

Check Text ( C-37154r1_chk )
Check the contents of user home directories for files with extended ACLs. Procedure: # cat /etc/passwd | cut -f 6,6 –d “:” | xargs -n1 -IDIR –aclget DIR OR #aclget / Check if extended permissions are disabled. If extended permissions are not disabled, this is a finding.

Fix Text (F-32413r1_fix)
Remove the extended ACL(s) from the files and directories in user home directories and disable extended permissions. #acledit /