UCF STIG Viewer Logo

All global initialization files must have mode 0644 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-11981 GEN001720 SV-39829r1_rule ECLP-1 Medium
Description
Global initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-38706r1_chk )
Check global initialization files permissions.

# ls -l /etc/.login
# ls -l /etc/profile
# ls -l /etc/bashrc
# ls -l /etc/environment
# ls -l /etc/security/environ
# ls -l /etc/csh.login
# ls -l /etc/csh.cshrc

If global initialization files exist and are more permissive than 0644, this is a finding.
Fix Text (F-35215r1_fix)
Change the mode of the global initialization file(s) to 0644.
# chmod 0644