All global initialization files must have mode 0444 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-11981	GEN001720	SV-38266r1_rule	ECLP-1	Medium

Description
Global initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon.

STIG	Date
HP-UX 11.23 Security Technical Implementation Guide	2015-12-02

Details

Check Text ( C-36376r1_chk )
Check global initialization files permissions: # ls -lL /etc/profile /etc/bashrc /etc/csh.login /etc/csh.cshrc /etc/.login If global initialization files are more permissive than 0444, this is a finding.

Fix Text (F-31714r1_fix)
Change the mode of the global initialization file(s) to 0444. # chmod 0444