Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-12014 | GEN005180 | SV-37679r1_rule | ECLP-1 | Medium |
Description |
---|
.Xauthority files ensure the user is authorized to access specific X Windows host. Excessive permissions may permit unauthorized modification of these files, which could lead to Denial of Service to authorized access or allow unauthorized access to be obtained. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2015-12-03 |
Check Text ( C-36866r1_chk ) |
---|
Check the file permissions for the .Xauthority files. Procedure: # ls -la |egrep "(\.Xauthority|\.xauth)" If the file mode is more permissive than 0600, this is finding. |
Fix Text (F-31822r1_fix) |
---|
Change the mode of the .Xauthority files. Procedure: # chmod 0600 .Xauthority |