Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-793 | GEN001300 | SV-44951r1_rule | Medium |
Description |
---|
Unauthorized access could destroy the integrity of the library files. |
STIG | Date |
---|---|
SUSE Linux Enterprise Server v11 for System z | 2016-12-20 |
Check Text ( C-42378r1_chk ) |
---|
Check the mode of library files. Procedure: # DIRS="/usr/lib /usr/lib64 /lib /lib64";for DIR in $DIRS;do find $DIR -type f -perm +022 -exec stat -c %a:%n {} \;;done This will return the octal permissions and name of all group or world writable files. If any file listed is world or group writable (either or both of the 2 lowest order digits contain a 2, 3 or 6), this is a finding. |
Fix Text (F-38376r1_fix) |
---|
Change the mode of library files to 0755 or less permissive. Procedure (example): # chmod go-w Note: Library files should have an extension of ".a" or a ".so" extension, possibly followed by a version number. |