UCF STIG Viewer Logo

All shell files must have mode 0755 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-922 GEN002220 SV-37403r1_rule ECLP-1 High
Description
Shells with world/group write permissions give the ability to maliciously modify the shell to obtain unauthorized access.
STIG Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide 2017-03-01

Details

Check Text ( C-36087r1_chk )
If /etc/shells exists, check the group ownership of each shell referenced.
# cat /etc/shells | xargs -n1 ls -l

Otherwise, check any shells found on the system.
# find / -name "*sh" | xargs -n1 ls -l

If a shell has a mode more permissive than 0755, this is a finding.
Fix Text (F-31334r1_fix)
Change the mode of the shell.
# chmod 0755