Find World Writable Files

AltaNivel 1Revisión manualsolaris

Descripción

Unix-based systems support variable settings to control access to files. World-writable files are the least secure. See the chmod man page for more information. Data in world-writable files can be read, modified, and potentially compromised by any user on the system.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Perform the following to verify that the result is as recommended: # find / \( -fstype nfs -o -fstype cachefs -o -fstype autofs -o -fstype ctfs -o -fstype mntfs -o -fstype objfs -o -fstype proc \) -prune -o -type f -perm -0002 -print No output should be returned. Note: The script above does a file traversal of all files under the "/" directory, including NFS attached file systems, so running this search command may take quite some time.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Correct or justify any items discovered in the Audit step. Determine the existence of any "write access" given for the "other" category (chmod o-w <filename>), and work with the owner to determine the best course of action in accordance with site policy.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: solarispermissions
Referencia: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 9.21 Find World Writable Files