Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-792 | GEN001280 | SV-37234r2_rule | ECCD-1 ECCD-2 | Low |
Description |
---|
If manual pages are compromised, misleading information could be inserted, causing actions to compromise the system. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2015-06-12 |
Check Text ( C-35923r2_chk ) |
---|
Check the mode of the manual page files. Procedure: # find /usr/share/man/ -type f -perm +022 -exec stat -c %a:%n {} \; |> more This to explicitly list only manual files with offending permissions. If any of the manual page files have a mode more permissive than 0644, this is a finding. |
Fix Text (F-31181r2_fix) |
---|
Change the mode of manual page files to 0644 or less permissive. Procedure (example): # chmod 0644 /path/to/manpage |