UCF STIG Viewer Logo

The Photon operating system must be configured so that all system startup scripts are protected from unauthorized modification.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239170 PHTN-67-000099 SV-239170r675318_rule Medium
Description
If system startup scripts are accessible to unauthorized modification, this could compromise the system on startup.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42381r675316_chk )
At the command line, execute the following command:

# find /etc/rc.d/* -xdev -type f -a '(' -perm -002 -o -not -user root -o -not -group root ')' -exec ls -ld {} \;

If any files are returned, this is a finding.
Fix Text (F-42340r675317_fix)
At the command line, execute the following commands for each returned file:

# chmod o-w
# chown root:root