All network services daemon files must have mode 0755 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-786	GEN001180	SV-37194r1_rule	ECLP-1	Medium

Description
Restricting permission on daemons will protect them from unauthorized modification and possible system compromise.

STIG	Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide	2017-03-01

Details

Check Text ( C-35891r1_chk )
Check the mode of network services daemons. # find /usr/sbin -type f -perm +022 -exec stat -c %a:%n {} \; This will return the octal permissions and name of all files that are group or world writable. If any network services daemon listed is world or group writable (either or both of the 2 lowest order digits contain a 2, 3 or 6), this is a finding. Note: Network daemons not residing in these directories (such as httpd or sshd) must also be checked for the correct permissions.

Check Text ( C-35891r1_chk )

Check the mode of network services daemons.
# find /usr/sbin -type f -perm +022 -exec stat -c %a:%n {} \;

This will return the octal permissions and name of all files that are group or world writable.
If any network services daemon listed is world or group writable (either or both of the 2 lowest order digits contain a 2, 3 or 6), this is a finding.
Note: Network daemons not residing in these directories (such as httpd or sshd) must also be checked for the correct permissions.

Fix Text (F-31146r1_fix)
Change the mode of the network services daemon. # chmod go-w