STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX library files must have mode 0755 or less permissive.

DISA Rule

SV-215279r508663_rule

Vulnerability Number

V-215279

Group Title

SRG-OS-000259-GPOS-00100

Rule Version

AIX7-00-002088

Severity

CAT II

CCI(s)

• CCI-001499 - The organization limits privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

Change the mode of library files to "0755" or less permissive by running the following command:
# chmod 0755 <path>/<library-file>

NOTE: Library files should have an extension of .a or .so (a=archive, so=shared object) extension, possibly followed by a version.

Check Contents

Check the mode of library files by running the following command:
# ls -lLR /usr/lib /lib

If any of the library files have a mode more permissive than "0755", this is a finding.

Vulnerability Number

V-215279

Documentable

False

Rule Version

AIX7-00-002088

Severity Override Guidance

Check the mode of library files by running the following command:
# ls -lLR /usr/lib /lib

If any of the library files have a mode more permissive than "0755", this is a finding.

Check Content Reference

M

Target Key

4012

Comments