All global initialization files must have mode 0644 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-11981	GEN001720	SV-39829r1_rule	ECLP-1	Medium

Description
Global initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon.

STIG	Date
Solaris 9 SPARC Security Technical Implementation Guide	2013-01-10

Details

Check Text ( C-38706r1_chk )
Check global initialization files permissions. # ls -l /etc/.login # ls -l /etc/profile # ls -l /etc/bashrc # ls -l /etc/environment # ls -l /etc/security/environ # ls -l /etc/csh.login # ls -l /etc/csh.cshrc If global initialization files exist and are more permissive than 0644, this is a finding.

Fix Text (F-35215r1_fix)
Change the mode of the global initialization file(s) to 0644. # chmod 0644