Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-48133 | SOL-11.1-070020 | SV-61005r1_rule | Medium |
Description |
---|
Group-writable or world-writable user home directories may enable malicious users to steal or modify other users' data or to gain another user's system privileges. |
STIG | Date |
---|---|
Solaris 11 SPARC Security Technical Implementation Guide | 2015-12-07 |
Check Text ( C-50565r1_chk ) |
---|
The root role is required. Check that the permissions on users' home directories are 750 or less permissive. # for dir in `logins -ox |\ awk -F: '($8 == "PS") { print $6 }'`; do find ${dir} -type d -prune \( -perm -g+w -o \ -perm -o+r -o -perm -o+w -o -perm -o+x \) -ls done If output is created, this is finding. |
Fix Text (F-51741r1_fix) |
---|
The root role is required. Change the permissions on users' directories to 750 or less permissive. # chmod 750 [directory name] |