Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-215332 | AIX7-00-003019 | SV-215332r508663_rule | Medium |
Description |
---|
Excessive permissions on home directories allow unauthorized access to user files. |
STIG | Date |
---|---|
IBM AIX 7.x Security Technical Implementation Guide | 2021-06-16 |
Check Text ( C-16530r294447_chk ) |
---|
Verify user home directories have no extended ACLs using command: # cat /etc/passwd | cut -f 6,6 -d ":" | xargs -n1 aclget * * ACL_type AIXC * attributes: base permissions owner(root): rwx group(system): r-x others: r--- extended permissions disabled If extended permissions are not disabled, this is a finding. |
Fix Text (F-16528r294448_fix) |
---|
Remove the extended ACL from the user home directory and disable extended permissions: # acledit |