The root account's home directory (other than /) must have mode 0700.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-775	GEN000920	SV-775r2_rule	ECCD-1 ECCD-2	Medium

Description
Permissions greater than 0700 could allow unauthorized users access to the root home directory.

STIG	Date
UNIX SRG	2013-03-26

Details

Check Text ( C-28063r1_chk )
Check the mode of the root home directory. Procedure: # grep "^root" /etc/passwd | awk -F":" '{print $6}' # ls -ld If the mode of the directory is not equal to 0700, this is a finding. If the home directory is /, this is not applicable.

Fix Text (F-929r2_fix)
The root home directory will have permissions of 0700. Do not change the protections of the / directory. Use the following command to change protections for the root home directory. # chmod 0700 /rootdir.