All global initialization files must have mode 0444 or less permissive.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-11981	GEN001720	SV-12482r2_rule	ECLP-1	Medium

Description
Global initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon logon.

STIG	Date
UNIX SRG	2013-03-26

Details

Check Text ( C-7946r2_chk )
Check global initialization files' permissions: # ls -l /etc/.login # ls -l /etc/profile # ls -l /etc/bashrc # ls -l /etc/environment # ls -l /etc/security/environ If global initialization files are more permissive than 0444, this is a finding.

Fix Text (F-11242r2_fix)
Change the mode of the global initialization file(s) to 0444. # chmod 0444