TMAegis
solaris için daha fazla kural

TMA-SOLARIS-9.21

Find World Writable Files

YüksekDüzey 1Manuel incelemesolaris

Açıklama

Unix-based systems support variable settings to control access to files. World-writable files are the least secure. See the chmod man page for more information. Data in world-writable files can be read, modified, and potentially compromised by any user on the system.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Perform the following to verify that the result is as recommended: # find / \( -fstype nfs -o -fstype cachefs -o -fstype autofs -o -fstype ctfs -o -fstype mntfs -o -fstype objfs -o -fstype proc \) -prune -o -type f -perm -0002 -print No output should be returned. Note: The script above does a file traversal of all files under the "/" directory, including NFS attached file systems, so running this search command may take quite some time.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Correct or justify any items discovered in the Audit step. Determine the existence of any "write access" given for the "other" category (chmod o-w <filename>), and work with the owner to determine the best course of action in accordance with site policy.

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
solarispermissions
Referans
CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 9.21 Find World Writable Files