TMA-AIX-3.5
Ensure there are no group staff writable files
SedangLevel 1Otomatisaix
Deskripsi
The system is audited for group staff writable files. An audit should be performed on the system to search for files that can be modified by members of the group staff. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.
Cara pemeriksaan
Metode audit: Perintah shell
shell
command -v find >/dev/null 2>&1 || exit 1; out=$( { find / \( -fstype jfs -o -fstype jfs2 \) -type f -perm -g+w -group staff -ls ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20- Output yang diharapkan
compliant
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Run the following command to remove the write bit for the group staff: find / \( -fstype jfs -o -fstype jfs2 \) -type f -perm -g+w -group staff - exec chmod g-w {} +
Properti
- Sistem operasi
- Apa saja
- Tag
- aixaccounts
- Referensi
- CIS IBM AIX 7 Benchmark v1.2.0 - 3.5 Ensure there are no group staff writable files
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target aix