The AIX user home directories must not have extended ACLs.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-215332	AIX7-00-003019	SV-215332r508663_rule		Medium

Description
Excessive permissions on home directories allow unauthorized access to user files.

STIG	Date
IBM AIX 7.x Security Technical Implementation Guide	2022-06-06

Details

Check Text ( C-16530r294447_chk )
Verify user home directories have no extended ACLs using command: # cat /etc/passwd | cut -f 6,6 -d ":" | xargs -n1 aclget * * ACL_type AIXC * attributes: base permissions owner(root): rwx group(system): r-x others: r--- extended permissions disabled If extended permissions are not disabled, this is a finding.

Fix Text (F-16528r294448_fix)
Remove the extended ACL from the user home directory and disable extended permissions: # acledit