Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-989 | GEN003380 | SV-45669r1_rule | Medium |
Description |
---|
If "at" programs are located in, or subordinate, to world-writable directories, they become vulnerable to removal and replacement by malicious users or system intruders. |
STIG | Date |
---|---|
SUSE Linux Enterprise Server v11 for System z | 2016-12-20 |
Check Text ( C-43035r1_chk ) |
---|
List any "at" jobs on the system. Procedure: # ls /var/spool/at /var/spool/atjobs For each "at" job, determine which programs are executed by "at." Procedure: # more Check the directory containing each program executed by "at" for world-writable permissions. Procedure: # ls -la If "at" executes programs in world-writable directories, this is a finding. |
Fix Text (F-39067r1_fix) |
---|
Remove the world-writable permission from directories containing programs executed by "at". Procedure: # chmod o-w |