Library files must have mode 0755 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-793	GEN001300 M6	SV-37911r1_rule	DCSL-1	Medium

Description
Unauthorized access could destroy the integrity of the library files.

STIG	Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide Draft	2013-01-10

Details

Check Text ( C-37571r1_chk )
Open a terminal session and enter the following command to verify the permissions on library and framework files, all on one line. find /System/Library/Frameworks /Library/Frameworks /usr/lib /usr/local/lib -type f -perm +022 -exec stat -f %Lp:%N {} \; If any of the library files have a mode more permissive than 0755, this is a finding.

Fix Text (F-32814r1_fix)
Open a terminal session and enter the following command to change the mode of library files to 0755 or less permissive. chmod 0755 NOTE: Library files should have an extension of ".a" or ".so", possibly followed by a version number. Frameworks are directories that may already contain files with more restrictive permissions than 755 and thus should not have their modes changed to 755 recursively.

Fix Text (F-32814r1_fix)

Open a terminal session and enter the following command to change the mode of library files to 0755 or less permissive.

chmod 0755

NOTE: Library files should have an extension of ".a" or ".so", possibly followed by a version number. Frameworks are directories that may already contain files with more restrictive permissions than 755 and thus should not have their modes changed to 755 recursively.