TMA-AIX-3.4
Ensure world writable files are secured
HighLevel 1Automatedaix
Description
The system is audited for world writable files. An audit should be performed on the system to search for the presence of world writable files. In an extreme case - where this permission is required - the file needs to be added to the TSD and audit configurations. The preference is no world writeable files. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.
How it is checked
Audit method: Shell command
shell
command -v find >/dev/null 2>&1 || exit 1; out=$( { find / \( -fstype jfs -o -fstype jfs2 \) -type f -perm -o+w -ls ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20- Expected output
compliant
How it is fixed
Fix method: Guidance or infrastructure patch
Run the following command to remove the write bit from other: find / \( -fstype jfs -o -fstype jfs2 \) -type f -perm -o+w -exec chmod o-w {} +
Properties
- Operating systems
- Any
- Tags
- aixpermissions
- Reference
- CIS IBM AIX 7 Benchmark v1.2.0 - 3.4 Ensure world writable files are secured
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aix