Title

The file integrity tool must be configured to verify extended attributes. (Cat III impact)

Discussion

Extended attributes in file systems are used to contain arbitrary data and file metadata potentially having security implications.

Check Content

Open a terminal session and enter the following command to verify the permissions are set to the original installation settings. diskutil verifyPermissions / If files are shown with incorrect extended attributes, this is a finding.

Fix Text

Open a terminal session and enter the following command to remove extended attributes. diskutil repairPermissions /

Additional Identifiers

Rule ID: SV-38141r1_rule

Vulnerability ID: V-22508

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.