Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-216418 | SOL-11.1-070020 | SV-216418r603267_rule | Medium |
Description |
---|
Group-writable or world-writable user home directories may enable malicious users to steal or modify other users' data or to gain another user's system privileges. |
STIG | Date |
---|---|
Solaris 11 SPARC Security Technical Implementation Guide | 2021-03-01 |
Check Text ( C-17654r371342_chk ) |
---|
The root role is required. Check that the permissions on users' home directories are 750 or less permissive. # for dir in `logins -ox |\ awk -F: '($8 == "PS") { print $6 }'`; do find ${dir} -type d -prune \( -perm -g+w -o \ -perm -o+r -o -perm -o+w -o -perm -o+x \) -ls done If output is created, this is finding. |
Fix Text (F-17652r371343_fix) |
---|
The root role is required. Change the permissions on users' directories to 750 or less permissive. # chmod 750 [directory name] |