TMA-AIX-3.5
Ensure there are no group staff writable files
OrtaDüzey 1Otomatikaix
Açıklama
The system is audited for group staff writable files. An audit should be performed on the system to search for files that can be modified by members of the group staff. Audit: automated read-only check derived from the CIS audit procedure; it prints "compliant" when the control is met.
Nasıl denetlenir
Denetim yöntemi: Kabuk komutu
shell
command -v find >/dev/null 2>&1 || exit 1; out=$( { find / \( -fstype jfs -o -fstype jfs2 \) -type f -perm -g+w -group staff -ls ; } 2>/dev/null ); [ -z "$out" ] && echo compliant || printf '%s\n' "$out" | head -n 20- Beklenen çıktı
compliant
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Run the following command to remove the write bit for the group staff: find / \( -fstype jfs -o -fstype jfs2 \) -type f -perm -g+w -group staff - exec chmod g-w {} +
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- aixaccounts
- Referans
- CIS IBM AIX 7 Benchmark v1.2.0 - 3.5 Ensure there are no group staff writable files
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
shell
tmaegis scan --target aix