Find World Writable Files

高レベル 1手動レビューsolaris

説明

Unix-based systems support variable settings to control access to files. World-writable files are the least secure. See the chmod man page for more information. Data in world-writable files can be read, modified, and potentially compromised by any user on the system.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Perform the following to verify that the result is as recommended: # find / \( -fstype nfs -o -fstype cachefs -o -fstype autofs -o -fstype ctfs -o -fstype mntfs -o -fstype objfs -o -fstype proc \) -prune -o -type f -perm -0002 -print No output should be returned. Note: The script above does a file traversal of all files under the "/" directory, including NFS attached file systems, so running this search command may take quite some time.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Correct or justify any items discovered in the Audit step. Determine the existence of any "write access" given for the "other" category (chmod o-w <filename>), and work with the owner to determine the best course of action in accordance with site policy.

プロパティ

オペレーティングシステム: すべて
タグ: solarispermissions
参照: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 9.21 Find World Writable Files