Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-239169 | PHTN-67-000098 | SV-239169r675315_rule | Medium |
Description |
---|
Local initialization files are used to configure the user's shell environment upon login. Malicious modification of these files could compromise accounts upon login. |
STIG | Date |
---|---|
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide | 2021-04-15 |
Check Text ( C-42380r675313_chk ) |
---|
At the command line, execute the following command: # find /etc/bash.bashrc /etc/profile /etc/profile.d/ -xdev -type f -a '(' -perm -002 -o -not -user root -o -not -group root ')' -exec ls -ld {} \; If any files are returned, this is a finding. |
Fix Text (F-42339r675314_fix) |
---|
At the command line, execute the following commands for each returned file: # chmod o-w # chown root:root |