UCF STIG Viewer Logo

All shell files must have mode 0755 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-922 GEN002220 SV-922r2_rule ECLP-1 High
Description
Shells with world/group-write permissions give the ability to maliciously modify the shell to obtain unauthorized access.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-8025r2_chk )
If /etc/shells exists, check the group ownership of each shell referenced.
# cat /etc/shells | xargs -n1 ls -lL

Otherwise, check any shells found on the system.
# find / -name "*sh" | xargs -n1 ls -lL

If a shell has a mode more permissive than 0755, this is a finding.
Fix Text (F-1076r3_fix)
Change the mode of the shell.
# chmod 0755