Library files must have mode 0755 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-793	GEN001300	SV-37241r2_rule		Medium

Description
Unauthorized access could destroy the integrity of the library files.

STIG	Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide	2017-03-01

Details

Check Text ( C-35933r2_chk )
Check the mode of library files. Procedure: # DIRS="/usr/lib /lib /usr/lib64 /lib64";for DIR in $DIRS;do find $DIR -type f -perm +022 -exec stat -c %a:%n {} \;;done This will return the octal permissions and name of all group or world writable files. If any file listed is world or group writable (either or both of the 2 lowest order digits contain a 2, 3 or 6), this is a finding.

Fix Text (F-31188r1_fix)
Change the mode of library files to 0755 or less permissive. Procedure (example): # chmod go-w Note: Library files should have an extension of ".a" or a ".so" extension, possibly followed by a version number.