TMA-SOLARIS-9.8
Ensure root PATH Integrity
HochStufe 1Automatisiertsolaris
Beschreibung
The root user can execute any command on the system and could be tricked into executing programs if the PATH is not set correctly. Including the current working directory (.) or any other writable directory in root's executable path makes it likely that an attacker can gain superuser access by forcing an administrator operating as root to execute a malcode, such as a Trojan horse program. Audit: root's login PATH must not contain ::, a trailing :, '.', or group/other writable directories.
So wird geprüft
Prüfmethode: Shell-Befehl
shell
p=$(su - root -c 'echo $PATH' 2>/dev/null | tail -n 1); [ -n "$p" ] || exit 1; r=compliant; case "$p" in *::*) r="Empty Directory in PATH (::)";; *:) r="Trailing : in PATH";; esac; IFS=:; set -- $p; unset IFS; for d in "$@"; do [ "$d" = . ] && r="PATH contains ."; if [ -d "$d" ]; then s=$(ls -ld "$d/" | awk 'substr($1,6,1)!="-" {print "Group Write permission set on directory"} substr($1,9,1)!="-" {print "Other Write permission set on directory"}' | head -n 1); [ -z "$s" ] || r="$s $d"; fi; done; echo "$r"- Erwartete Ausgabe
compliant
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Correct or justify any items discovered in the Audit step.
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- solarisaccounts
- Referenz
- CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 9.8 Ensure root PATH Integrity
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
shell
tmaegis scan --target solaris