Library files must have mode 0755 or less permissive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-793 | GEN001300 | SV-44951r1_rule | Medium |
| Description |
|---|
| Unauthorized access could destroy the integrity of the library files. |
| STIG | Date |
|---|---|
| SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide | 2018-09-19 |
Details
| Check Text ( C-42378r1_chk ) |
|---|
| Check the mode of library files. Procedure: # DIRS="/usr/lib /usr/lib64 /lib /lib64";for DIR in $DIRS;do find $DIR -type f -perm +022 -exec stat -c %a:%n {} \;;done This will return the octal permissions and name of all group or world writable files. If any file listed is world or group writable (either or both of the 2 lowest order digits contain a 2, 3 or 6), this is a finding. |
| Fix Text (F-38376r1_fix) |
|---|
| Change the mode of library files to 0755 or less permissive. Procedure (example): # chmod go-w Note: Library files should have an extension of ".a" or a ".so" extension, possibly followed by a version number. |