All public directories must be owned by a system account.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

All public directories must be owned by a system account.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-51423	OL6-00-000337	SV-65633r1_rule		Low

Description
Allowing a user account to own a world-writable directory is undesirable because it allows the owner of that directory to remove or replace any files that may be placed in the directory by other users.

STIG	Date
Oracle Linux 6 Security Technical Implementation Guide	2016-12-20

Details

Check Text ( C-53759r1_chk )
The following command will discover and print world-writable directories that are not owned by a system account, given the assumption that only system accounts have a uid lower than 500. Run it once for each local partition [PART]: # find [PART] -xdev -type d -perm -0002 -uid +500 -print If there is output, this is a finding.

Fix Text (F-56221r1_fix)
All directories in local partitions which are world-writable should be owned by root or another system account. If any world-writable directories are not owned by a system account, this should be investigated. Following this, the files should be deleted or assigned to an appropriate group.