UCF STIG Viewer Logo

The .Xauthority files must not have extended ACLs.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22446 GEN005190 SV-35167r1_rule ECLP-1 Medium
Description
.Xauthority files ensure the user is authorized to access the specific X Windows host. Extended ACLs may permit unauthorized modification of these files, which could lead to Denial of Service to authorized access or allow unauthorized access to be obtained.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-09-14

Details

Check Text ( C-36600r2_chk )
Get a list of (non-system account) users and the associated home directories.
# cat /etc/passwd | cut -f 1,6 -d ":"

Check the file permissions for the user .Xauthority files.
# ls -lLa //.Xauthority

If the permissions include a "+", the file has an extended ACL, this is a finding.
Fix Text (F-31967r2_fix)
Remove the optional ACL from the file.
# chacl -z //.Xauthority