Ensure default path does not include current working directory

MediaNivel 1Automatizadaaix

Descripción

This change removes any "." or "::" entries from /etc/environment. If a "." or "::" is present the current working directory is included in the default search path. Any "." and "::" will be removed from /etc/environment. This means that any harmful programs placed in common PATH locations, would never be automatically executed. All directories must be explicitly defined within the PATH variable. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.

Cómo se verifica

Método de auditoría: Comando de shell

shell

command -v grep >/dev/null 2>&1 || exit 1; [ -r /etc/environment ] || exit 1; out=$( { grep "^PATH=" /etc/environment | sed "s/^PATH=//" | awk '/(^:)|(::)|(:$)|(^\.:)|(:\.:)|(:\.$)|(^\.$)/' ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Examine PATH in /etc/environment to see if it contains any "." or "::" entries: grep "^PATH=" /etc/environment |awk '/((:[ \t]*:)|(:[ \t]*$)|(^[\t]*:)|(^.:)|(:.$)|(:.:))/' If the command above yields output, remove the "." and "::" entries from: vi /etc/environment

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aixhardening
Referencia: CIS IBM AIX 7 Benchmark v1.2.0 - 4.8.4 Ensure default path does not include current working directory

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target aix