Set Sticky Bit on World Writable Directories

YüksekDüzey 1Manuel incelemesolaris

Açıklama

When the so-called sticky bit (set with chmod +t) is set on a directory, then only the owner of a file may remove that file from the directory (as opposed to the usual behavior where anybody with write access to that directory may remove the file). Files in directories that have had the 'sticky bit' set, can only be deleted by users that have both write permissions for the directory in which the file resides, as well as ownership of the file or directory, or has sufficient privilege.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Perform the following to verify that the result is as recommended: # find / \( -fstype nfs -o -fstype cachefs -o -fstype autofs -o -fstype ctfs -o -fstype mntfs -o -fstype objfs -o -fstype proc \) -prune -o -type d \( - perm -0002 -a ! -perm -1000 \) -ls No output should be returned.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

To set the sticky bit on a directory, run the following command: # chmod +t [directory name]

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: solarispermissions
Referans: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 5.1 Set Sticky Bit on World Writable Directories