Check: GEN002500
HP-UX 11.31 STIG:
GEN002500
(in versions v1 r19 through v1 r13)
Title
The sticky bit must be set on all public directories. (Cat III impact)
Discussion
Failing to set the sticky bit on the public directories allows unauthorized users to delete files in the directory structure. The only authorized public directories are those temporary directories supplied with the system or those designed to be temporary file repositories. The setting is normally reserved for directories used by the system and by users for temporary file storage (e.g., /tmp) and for directories requiring global read/write access.
Check Content
Verify all world-writable directories have the sticky bit set. Procedure: # find / -type d -perm -002 ! -perm -1000 -exec ls -lLd {} \; | tee wwlist If the sticky bit is not set on a world-writable directory, this is a finding.
Fix Text
Set the sticky bit on all public directories. Procedure: # chmod 1777 <world writeable directory>
Additional Identifiers
Rule ID: SV-38474r1_rule
Vulnerability ID: V-806
Group Title: GEN002500
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |