STIGQter STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

AIX public directories must be the only world-writable directories and world-writable files must be located only in public directories.

DISA Rule

SV-215409r508663_rule

Vulnerability Number

V-215409

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

AIX7-00-003111

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Remove or change the mode for any world-writable file or directory on the system that is not required to be world-writable by running command:
# chmod o-w <file/directory>

Document all changes.

Check Contents

Check the system for world-writable files and directories by running command:
# find / -perm -2 -a \( -type d -o -type f \) -exec ls -ld {} \;

If any world-writable files or directories are located, except those required for proper system or application operation, such as "/tmp" and "/dev/null", this is a finding.

Vulnerability Number

V-215409

Documentable

False

Rule Version

AIX7-00-003111

Severity Override Guidance

Check the system for world-writable files and directories by running command:
# find / -perm -2 -a \( -type d -o -type f \) -exec ls -ld {} \;

If any world-writable files or directories are located, except those required for proper system or application operation, such as "/tmp" and "/dev/null", this is a finding.

Check Content Reference

M

Target Key

4012

Comments