TMAegisBeta
More rules for solaris

Oracle Solaris

TMA-SOLARIS-9.5

Verify System File Permissions

MediumLevel 1Manual reviewsolaris

Description

The pkg verify and command checks the accuracy of installed directory structures and files. It is important to ensure that system files and directories are maintained with the permissions they were intended to have from the OS vendor (Oracle).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Perform the following to verify that the result is as recommended: # pkg verify Errors may be a simple reflection of changes made earlier in this benchmark, such as alteration of the ownership of the cron process, so this result indicates that pkg verify is doing its job and detecting file changes.

How it is fixed

Fix method: Guidance or infrastructure patch

Correct or justify any items discovered in the Audit step. Perform the following to set correct any identified package errors: # pkg fix Exercise caution in running this command as it may reverse modifications implemented previously including some of those recommended by this document. Rather than use this command broadly, it is recommended that it be used more tactically to correct specific package problems when possible.

Properties

Operating systems
Any
Tags
solarispermissions
Reference
CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 9.5 Verify System File Permissions