UCF STIG Viewer Logo

Manual page files must have mode 0644 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-792 GEN001280 SV-37234r2_rule ECCD-1 ECCD-2 Low
Description
If manual pages are compromised, misleading information could be inserted, causing actions to compromise the system.
STIG Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide 2015-06-12

Details

Check Text ( C-35923r2_chk )
Check the mode of the manual page files.

Procedure:

# find /usr/share/man/ -type f -perm +022 -exec stat -c %a:%n {} \; |> more

This to explicitly list only manual files with offending permissions.

If any of the manual page files have a mode more permissive than 0644, this is a finding.
Fix Text (F-31181r2_fix)
Change the mode of manual page files to 0644 or less permissive.

Procedure (example):
# chmod 0644 /path/to/manpage