UCF STIG Viewer Logo

Library files must have mode 0755 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-793 GEN001300 SV-64525r2_rule Medium
Description
Unauthorized access could destroy the integrity of the library files.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2020-02-25

Details

Check Text ( C-52941r2_chk )
Check the mode of library files.

Procedure:
# DIRS="/usr/lib /lib /usr/lib64 /lib64";for DIR in $DIRS;do find $DIR -type f -perm +022 -exec stat -c %a:%n {} \;;done

This will return the octal permissions and name of all group or world writable files.
If any file listed is world or group writable (either or both of the 2 lowest order digits contain a 2, 3 or 6), this is a finding.
Fix Text (F-55123r2_fix)
Change the mode of library files to 0755 or less permissive.

Procedure (example):
# chmod go-w

Note: Library files should have an extension of ".a" or a ".so" extension, possibly followed by a version number.