STIGQter: STIG Summary: Solaris 10 SPARC Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

System files and directories must not have uneven access permissions.

DISA Rule

SV-226484r603265_rule

Vulnerability Number

V-226484

Group Title

SRG-OS-000312

Rule Version

GEN001140

Severity

CAT II

CCI(s)

• CCI-002165 - The information system enforces organization-defined discretionary access control policies over defined subjects and objects.

Weight

10

Fix Recommendation

Change the mode of files with uneven permissions so owners do not have less permission than group or world users.

Check Contents

Check system directories for uneven file permissions.
Procedure:
# ls -lL /etc /bin /usr/bin /usr/ucb /sbin /usr/sbin

Uneven file permissions exist if the file owner has less permissions than the group or other user classes. If any of the files in the above listed directories contain uneven file permissions, this is a finding.

Vulnerability Number

V-226484

Documentable

False

Rule Version

GEN001140

Severity Override Guidance

Check system directories for uneven file permissions.
Procedure:
# ls -lL /etc /bin /usr/bin /usr/ucb /sbin /usr/sbin

Uneven file permissions exist if the file owner has less permissions than the group or other user classes. If any of the files in the above listed directories contain uneven file permissions, this is a finding.

Check Content Reference

M

Target Key

4060

Comments