UCF STIG Viewer Logo

All run control scripts must have mode 0755 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-906 GEN001580 SV-27199r2_rule ECLP-1 Medium
Description
If the startup files are writable by other users, they could modify the startup files to insert malicious commands into the startup files.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-28179r3_chk )
Check run control script modes.

# ls -lL /etc/rc* /etc/init.d /lib/svc/method

If any run control script has a mode more permissive than 0755, this is a finding.
Fix Text (F-39582r1_fix)
Ensure all system startup files have mode 0755 or less permissive. Examine the rc files, and all files in the rc1.d (rc2.d, and so on) directories, and in the /etc/init.d and /lib/svc/method directories to ensure they are not world-writable. If they are world-writable, use the chmod command to correct the vulnerability and to research why.

Procedure:
# chmod go-w