All run control scripts must have no extended ACLs.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22353	GEN001590	SV-63847r1_rule		Medium

Description
If the startup files are writable by other users, they could modify the startup files to insert malicious commands into the startup files.

STIG	Date
Oracle Linux 5 Security Technical Implementation Guide	2020-02-25

Details

Check Text ( C-52381r1_chk )
Verify run control scripts have no extended ACLs. # ls -lL /etc/rc* /etc/init.d If the permissions include a '+', the file has an extended ACL. If the file has an extended ACL and it has not been documented with the IAO, this is a finding.

Fix Text (F-54419r2_fix)
Remove the extended ACL from the file. # setfacl --remove-all