Title

All run control scripts must have no extended ACLs. (Cat II impact)

Discussion

If the startup files are writable by other users, these users could modify the startup files to insert malicious commands into the startup files.

Check Content

Verify run control scripts have no extended ACLs. # ls -lL /etc/rc* /etc/init.d If the permissions include a "+", the file has an extended ACL and this is a finding.

Fix Text

Remove the extended ACL from the file. # chmod A- [run control script with extended ACL]

Additional Identifiers

Rule ID: SV-216065r959010_rule

Vulnerability ID: V-216065

Group Title: SRG-OS-000480

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.